I am working on a project where a customer wants a program on a few of their machines (touch screen machine interfaces) to be able to access Active Directory and use their Windows Logons within it. I got this working by adding the few machines to the test domain I have created and the software is working beautifully within this setup.
However the customer does not want these machines in the domain because they are supposed to have 100% uptime (or as close as possible being they are machine interfaces) and not have updates or forced restarts pushed to them by their company domain. My contact within the customer seems to think getting their IT to agree to not restarting or pushing updates to these machines is not on the table.
I was not able to get the desired domain logon behavior with the workstations in WORKGROUP and no trust relationship setup.
The developer of the software's support team said the work around should be adding each workstation to the domain as a trusted location but I can't seem to figure out how to do that, only add trust relationships with other domains.
Am I missing a quick and easy setting or can this only be accomplished with a small domain that does not push updates and restarts that is trusted by their IT's domain thus allowing their IT domain Users to log on to this software?
These are Windows 7 Embedded Standard Workstations and my Domain Controller is a Virtual Machine running Windows Server 2012 R2