Re: User logon with domain not available

From: Torgeir Bakken (MVP) (Torgeir.Bakken-spam_at_hydro.com)
Date: 10/14/03 

Date: Tue, 14 Oct 2003 18:21:15 +0200

"Shenan T. Stanley" wrote:

> André Navoizat <> wrote:
> > Is it possible to logon on a Windows XP pro worstation if
> > I can't access the domain controller.
> > I want to log on the domain,not using a local user.
> > It was working in W2K
>
> It works in XP the same way it worked in 2000. If the user has logged into
> the domain recently on the computer in question, they should have "cached
> credentials" and for a limited number of times, be able to log into the
> computer without any connection to the domain

Actually, there is no limitations to the number of times you can log on with
cached credentials in a row.

This limited number of times is a common misunderstanding caused by the bad
wording in the documentation for cached credentials, mentioning that the cached
credentials is set to default 10 logons.

What it really means is that the computer will remember the credentials for up
to 10 *different* users, and as long as you are among one of those, you can log
on with cached credentials as many times as you want, over a indefinite time. 

--
torgeir
Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of the 1328 page
Scripting Guide: http://www.microsoft.com/technet/scriptcenter

Relevant Pages

  • Re: access granted after lock out
    ... Interactive logon: Number of previous logons to cache ... You cannot log on to a computer that is using cached credentials after you change your password by using a domain controller ... her account was locked out on all three. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Mandatory assignments, "Logon" switch
    ... client until user logs on the client (without cached credentials). ... requesting policy. ... > It is not a problem if users logon using cached credentials but you should ...
    (microsoft.public.sms.swdist)
  • Re: Remote User Needs to Change PWD without connecting to domain
    ... I spent forever setting up our VPN, and I'm pretty sure it's good to go now ... I'm just really curious what happens when her password expires and ... > I think you are misinterpreting the "10 logon" settings. ... > when cached credentials are used to logon locally. ...
    (microsoft.public.win2000.security)
  • Re: Cached Credentials causing problems with shares?
    ... logon to the machine locally and then connect to the shares over the VPN. ... But I'm trying to access the shares while connected to a VPN ... on using cached credentials so it can contact the domain controllers. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Logon with domain account when not attached to the network
    ... Then a domain account can logon on the workstation even when it's ... it is called logon with cached credentials. ... Default a computer will remember cached credentials for up to 10 users. ... Microsoft MVP Scripting and WMI, ...
    (microsoft.public.security)
Quantcast