David, thank yo so much for the thorough information.

>It wouldn't hurt to learn more about AD, but it's probably overkill
>for your situation.  Under AD, domains can be nested to form trees,
>and trees can be grouped to form forests -- in your case, you want to
>make a new domain, in a new tree, in a new forest.  The only really
>tricky part of DCPROMO is that you need an NTFS (5.0, so formatted by
>Win2K) partition for the domain SYSVOL, and you need to decide whther
>you want to support pre-2K domain clients or not.

You're right. It doesn't need too much more knowledge than the ones you
have provided. I set it up this weekend and it works fine. It appears more
restrictive, eg., I was not allowed to install certain programs and was
prompt to install Directory services. Other than the fact that I can login
to a domain (instead of workgroup) from another machine, what advantages do
I get from having a domain controller? Does it have more control and more
security than Workgroup?

TIA,

Changhsu Liu

         PCBUILD maintains hundreds of useful files for download
                     visit our download web page at:
                  http://freepctech.com/downloads.shtml