Suggestions for Laptop Account Setup

For Printing at DØ

Your home institute’s system administrator may impose a domain account on your laptop. Don’t try to pull your computer out of the domain just because of a trip to Fermilab: there are too many consequences when you get back home.  The account name is a key variable in meshing with the DØ computing environment. For printing authentication:

q       Most straightforward is to use an account with a different username than your dzero username.  Usernames are case-insensitive, so Username is the same as username.

q       Next best is using an account with the same username and password as your dzero account.  Authentication is a breeze, but it may be difficult to keep the passwords aligned.  It is awkward to change your dzero password: log into the dzero domain on someone else’s machine, then ctl-alt-del and Change Password.  Failing to keep the password aligned puts you in the worst case:

q       An account with the same username but a different password leaves you vulnerable to confusing the print server, though by carefully following the suggested method, you can still cope.  If you find this too tedious, you can get get out of this situation:

o       Change the username of either your domain account, or your dzero account. 

o       Create an account local to your laptop with a different username than your dzero account.

o       Create an account local to your laptop with the same username and password as your dzero account (if you can control password policy and keep it aligned).  Account laptop\username is distinct from domain\username.

o       By brute force (while at Fermilab, on the network) change your domain password to the Fermilab one and then change it back.  Password policy of your domain may prevent this.

 

Managing laptop accounts

q       Software such as MultiNetworkManager may help you manage multiple laptop accounts and network configurations.

q       The local account method gives you a user profile for laptop_name\username or laptop_name\localusername distinct from your usual profile for domain\username.  However, if you (and your system manager) agree, you can redirect the user profile for such a local account to use the domain profile:

 

Hacking the Registry to allow two accounts to share a profile

Suppose you want to have account localname.laptop_name use the profile of the domain account dname.

You could find the profiles in C:Documents and Settings. 

Then modify the registry:

In Start|Run: regedit

Change

hkey localmachine|Microsoft|windowsNt|current version|profilelist |ProfileImage Path

from …. localname.laptop_name  to dname

and Exit regedit

You could find the relevant registry key by Edit|Find on localname.laptop_name   

 

This worked in a case where both accounts were Administrators, with one glitch that Outlook had to be re-informed of some settings, but had the same basic data (contacts, appointments etc).

 

BEFORE:

AFTER: