- The EECS Domain
- Accessing Your Home Directory
- Checking File Permissions
- Accessing EECS Computing Resources Using VPN
- Mapping Network Shares from Off Campus
- Using Remote Desktop to Copy Files to a Local Drive
The EECS Domain
The EECS domain is a set of users, computers, and printers organized under a unified security policy. With an EECS user ID, you can log into most machines on the domain, and your home directory will be automapped to those machines. If you join your machine to the domain, it can be used as a workstation by most users in the domain, and you can map network drives and connect to domain printers from it without further authentication.
Permission to Join the EECS Domain
For any particular machine, the person listed as its system administrator in the IRIS Network Database has permission to add it to the domain. To change who this person is, please submit a System Update Request.
Joining the EECS Domain
Before adding your computer to the EECS domain, you should do the following:
- Upgrade to the latest supported version of Windows.
- Submit a System Activation Request, answering “yes” to the question “Do you want to join the EECS Windows AD domain?”
- Enable NTLMv2 authentication in your machine's local security policy.
After you get a reply from IDSG stating that you add your computer to the EECS domain, do the following:
- Right-click the “My Computer” icon and choose
- Click on “Computer Name” tab and then on
- Click the domain button and type in
“eecs.berkeley.edu” and click OK.
- Enter your name and password (or those of the system's administrator) when prompted. It may be necessary to type “EECS\<your username>”).
- Click okay. You will be added to the EECS domain and the following
screen will pop up. Reboot your computer to complete the process.
Note: After you reboot, new software may begin to install. Depending on applied group policies, it may take up to an hour for the installation to finish.
Note:If you have trouble in the last steps, it may help to temporarily join a workgroup, reboot, then try again to join the domain.
Windows Authentication Level
As part of our ongoing efforts to harden security of systems on the EECS network, some weaker forms of authentication have been disabled. Systems need to be configured to speak either Kerberos or NTLM2 to authenticate successfully with network resources. Windows systems which are members of the EECS Active Directory domain do not need modification. However, administrators of systems outside the EECS Active Directory domain will need to do the following:
- Go to Control Panel -> Administrative Tools -> Local Security Policy
- Open Local Policies and select Security Options.
- Double click on 'Network Security: LAN Manager authentication level.'
- Choose 'Send NTLMv2 response only\refuse LM & NTLM'.
NOTE: If you are using Windows XP Home Edition, the procedure for setting NTLMv2 authentication involves editing the Windows registry. The instructions for doing this can be found on this website. This is an advanced procedure; please contact the EECS helpdesk if you need assistance.
Logging In/Out of the EECS Domain
How to log in
- Start your machine and boot into windows. The domain logon screen will appear.
- In the “User Name” field, enter your EECS username.
- Enter your Windows password in the password field.
- Select EECS from the “log on to:” dropdown menu.
- Click OK
How to log out
- Press the control, alt, and delete keys simultaneously.
- Click “Log Off” or “Shut Down”.
- Click OK.
Accessing Your Home Directory
- Home directories will be mapped to the H:\ drive by default; your system administrator may change this.
- Look under “My Computer” to find your home directory.
- Your home directory should appear on every EECS domain computer you log into.
Checking file permissions
- Right-click on the file or folder you want to check or change; choose Properties.
- Click on the Security tab.
- Add or remove individual access information as needed.
IMPORTANT: All files on your H:\ drive must be readable by EECS\Domain Administrators so that network staff are able to back up your files. DO NOT REMOVE THIS PERMISSION.
Note: It's generally best to never use “deny” boxes. It is much better to uncheck “allow” permissions. If you choose to “deny” the group called “everyone”, you have locked everyone out, including yourself.
Accessing EECS Computing Resources Using VPN
IST runs the Campus VPN Service. The VPN allows a computer to securely connect to the campus network, thus allowing connections to other systems as if your computer was on campus.
Mapping Network Shares from Off Campus
To map a network drive/directory from off campus, use the following procedure:
- Connect to the Campus VPN Service.
- Use the “run” command to connect to the desired server, e.g., \\home.eecs.berkeley.edu\<your username>.
- Navigate to the drive/directory you wish to map, right-click on it, and choose “Map Network Drive...”
- Choose the desired drive letter, then click on “Finish.” (Note: uncheck the “Reconnect at logon” box to avoid problems at Windows startup). You have now successfully mapped the drive!
Using Remote Desktop to Copy Files to a Local Drive
If you are blocked by the firewall, you can still copy files back and forth to your local system by using a Remote Desktop session.
- Windows XP Professional and Vista Enterprise have the Remote Desktop Connection client installed by default.
- If you need to download and install Remote Desktop, obtain it directly from Microsoft: type “remote desktop client” in the search field on the Microsoft Downloads page.
- Launch the Remote Desktop Connection client (START -> Program Files -> Accessories -> Communications -> Remote Desktop Connection).
- Click the Options button.
- Click on the “Local Resources Tab” at the top.
- Under “Local Devices,” check the box next to Disk Drives.
- Click on the “General” Tab.
- In the Computer field, type in:
- Enter in your EECS username and password, then click “Connect.”
- You will be prompted with a security warning as shown below.
- On WINTERM, go to “START -> My Computer”. You will see your local drives mapped as shown:
- From here, copy files in the usual way back and forth between your local system and WINTERM.