You don't need a domain controller to access a Win2k server or workstation from a workgroup. All you have to do is manage users on the stand alone server or workstation just like you would on a Windows NT 4 or 3.51 machine. It is not more secure just because there isn't a domain controller, it's probably less secure as it is harder to change passwords on a regular basis. I maintain a network with over 30 servers and workstations running mostly Win2k pro or server and couple of NT4 or Win 98 machines.

The network was built without a domain controller for two reasons. One, it took an inordinate amount of time to log onto the network when using the domain controller as compared to without the domain controller. Two, it was felt that a domain controller was a single point of failure for the network. Yes, we could have setup a secondary domain controller but we still didn't like first problem. Yes, it's more work but we don't change people often (no new hires or fires in the last 12 months).

Stuart