Re: How do you force authentication from PDC?
From: Star Fleet Admiral Q (Star_Fleet_Admiral_Q**NOSPAM**@hotmail.com)
Date: 04/23/03
- Next message: Star Fleet Admiral Q: "Re: Security updates 811493 & 817287"
- Previous message: Star Fleet Admiral Q: "Re: Windows XP lockout"
- In reply to: Nick Diotte: "How do you force authentication from PDC?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Star Fleet Admiral Q" <Star_Fleet_Admiral_Q**NOSPAM**@hotmail.com> Date: Tue, 22 Apr 2003 20:07:33 -0400
It could be using the "cached credentials" on the PC itself - my work laptop
does this when I'm not connected to the network or the Domain Controller is
not present. Group Policy has a setting on how many times login is allowed
with a "cached profile".
"Nick Diotte" <xphox@xphox.net> wrote in message
news:3ceeaf61.0304221137.18e70f74@posting.google.com...
> Alright,
>
> Here is my problem. I'm running a Windows NT 4 PDC, and have a domain
> setup. For referance we will call it DOMAIN.
>
> Here is an example of my problem:
> USERNAME logs into the Windows XP machine on DOMAIN, and receives all
> login scripts, policies, etc. USERNAME logs off.
>
> The next day, USERNAME logs into the Windows XP machine on DOMAIN
> (however the network link is actually down), this user does not
> recieve any login scripts, policies, etc. USERNAME logs off.
>
> How was this user able to log in? The XP machine did not check
> against the PDC, or BDC because it was actually off of the network.
> However the user is able to still log into the domain. If you plug
> back the cable into the machine, all network access is granted, but of
> course the script is still not executed. How can I force windows to
> not allow the user to login. Give an invalid username/password
> message, or an error about the domain being unaccessable?
>
> Note: The user can still log in even if we delete the profile, so
> where is the password being stored locally? Also I've tried a reg
> modification or two to not cache passwords, however they did not work.
>
> Any responces on this topic, would be much appreciated.
>
> Thanks,
>
> Nick Diotte
> Information System & Technology
> WCU
- Next message: Star Fleet Admiral Q: "Re: Security updates 811493 & 817287"
- Previous message: Star Fleet Admiral Q: "Re: Windows XP lockout"
- In reply to: Nick Diotte: "How do you force authentication from PDC?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|