Local caching of passwords

From: Keith (Keith_at_discussions.microsoft.com)
Date: 07/29/05

  • Next message: Bryan L: "Re: Mysterious Logon Failures in Security Log" 
    Date: Fri, 29 Jul 2005 12:14:02 -0700

    Where is the user's password cached when you have a GPO setting on
    Interactive logon: Number of previous logons to cache (in case domain
    controller is not available)? Is it store in LSASS secrets?

    If we set our server to not store local cache of user's password what
    application or other things will break? I u nderstand that if you turn that
    off and there is no domain controller available that you will be unable to
    logon to that server in that domain...But what other hidden gotchas are out
    there that I might not be thinking of?

  • Next message: Bryan L: "Re: Mysterious Logon Failures in Security Log"

    Relevant Pages

    • Windows 2003 member server with Windows 2000 Domain Controller
      ... If anyone is having a Windows 2003 member server with a Windows 2000 Domain ... Windows cannot obtain the domain controller name for your computer network. ... There are currently no logon servers available to service the logon request. ...
      (microsoft.public.win2000.security)
    • Re: Local Caching
      ... Interactive logon: Number of previous logons to cache? ... Is it store in LSASS secrets? ... If we set our server to not store local cache of user's password what ...
      (microsoft.public.windows.server.active_directory)
    • Re: Local Caching
      ... Number of previous logons to cache (in case domain ... > If we set our server to not store local cache of user's password what ... > logon to that server in that domain...But what other hidden gotchas are ...
      (microsoft.public.security)
    • Re: Schreibcache abschalten
      ... > Daten aus seinem Cache. ... Das scheint dann wohl vom Controller selbst abzuhängen. ... Using Hard Disk Controller Caching with SQL Server ...
      (microsoft.public.de.german.windows.server.general)
    • Re: Terminal Service access Domain Controller and Non-Domain Controlle
      ... I am unable to logon to the domain controller as that user. ... Add them to the Remote Desktop Users group on this server. ...
      (microsoft.public.windows.terminal_services)