Domain joined vs. workgroup

1.7 Given a scenario, configure Microsoft Windows networking features on a client/desktop

📘CompTIA A+ Core 2 (220-1202)


Windows computers can be part of either a workgroup or a domain. This affects how they are managed, how users log in, and how resources like files and printers are shared.

A. Workgroup

  • Definition: A workgroup is a small network where each computer manages its own accounts and settings.
  • Management: There is no central control. Each PC has its own usernames and passwords.
  • Size: Best for small networks (like 10 or fewer computers).
  • Login: Users log in using local accounts on that PC.
  • Security: Each computer handles its own security, so policies are not consistent across all computers.
  • Resource Sharing: Resources (files, printers) must be shared individually, and users need the credentials of the PC hosting them.
  • Example Use: Small office or home office where IT staff is minimal or non-existent.

B. Domain

  • Definition: A domain is a network controlled by a central server, usually running Active Directory.
  • Management: IT administrators can manage all computers, users, and security settings from one place.
  • Size: Ideal for large networks (like hundreds or thousands of computers).
  • Login: Users log in with domain accounts. The credentials work on any computer in the domain.
  • Security: Centralized control allows policies, permissions, and updates to be enforced network-wide.
  • Resource Sharing: Resources can be easily shared across the domain with proper permissions.
  • Example Use: Corporate offices, schools, or organizations with multiple users and computers.

2. Shared Resources

Shared resources allow multiple users to access the same files, folders, or devices over a network.

  • In a Workgroup:
    • Each computer manually shares folders or printers.
    • Users must have local accounts or know the username/password on the host computer.
    • Access permissions are managed individually per computer.
  • In a Domain:
    • Users access shared resources through Active Directory permissions.
    • IT administrators can set who can read, write, or modify resources for all users.
    • Easier to manage at scale.

Key Exam Tip: Always associate workgroups = decentralized, local control and domains = centralized, managed control.


3. Printers

Printers on a network can be shared in both workgroups and domains, but management differs:

  • Workgroup:
    • Printers are shared from a specific PC.
    • Users need access credentials for the PC hosting the printer.
    • Installing printer drivers may need manual setup on each PC.
  • Domain:
    • Printers can be published in Active Directory, making them easy to find.
    • IT can deploy printers automatically using Group Policy.
    • Easier for large networks because driver and access management are centralized.

4. File Servers

A file server is a computer that stores and manages files for multiple users:

  • Workgroup:
    • Any PC can act as a file server, but access is controlled locally.
    • Users must know the host computer’s credentials.
    • Harder to enforce consistent security policies.
  • Domain:
    • File servers are centrally managed.
    • Permissions can be set based on user roles, groups, or departments.
    • Centralized backup, auditing, and access management.

Example: In a company domain, the finance team might have a folder only they can access, while HR has separate access, all managed by the server.


5. Mapped Drives

A mapped drive is a shortcut on a user’s computer to a folder or drive stored on another computer or server.

  • Purpose: Makes network resources feel like local drives (like C: or D:).
  • In Workgroups:
    • Users manually map network drives.
    • They need credentials for the host computer each time, unless remembered.
  • In Domains:
    • IT can automatically map drives using Group Policy.
    • Users get seamless access to shared folders without manual setup.

Key Terms for the Exam:

  • UNC Path: \\ServerName\SharedFolder – the full path to access a shared resource.
  • Drive Letter Mapping: Assigning a letter like Z: to a shared folder.

6. Key Differences at a Glance

FeatureWorkgroupDomain
ManagementLocal to each PCCentralized via server
Login AccountsLocal accounts onlyDomain accounts (any PC)
Number of PCsSmall (≤10)Large (hundreds or more)
Security PoliciesIndividual PCEnforced network-wide
Resource SharingManualAutomatic & controlled centrally
Printer DeploymentManualCentralized via AD & GPO
Mapped DrivesManualCan be automatic via GPO

Exam Tips

  1. If a question mentions centralized management, Active Directory, or Group Policy, the answer is Domain.
  2. If a question mentions local accounts and each PC manages itself, the answer is Workgroup.
  3. Understand shared resources, printers, file servers, and mapped drives as tools for collaboration, and know who controls them in domains vs. workgroups.
  4. Remember UNC paths for accessing shared resources.
Buy Me a Coffee