Re: Number of cached logons

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Tim Springston \(MSFT\) (tspring_at_online.microsoft.com)
Date: 02/04/04 

Date: Wed, 4 Feb 2004 17:10:01 -0600

Hi Randy-

I wouldn't think that the process to check cace logon use would be aware of
the domain type, but it is possible.

Do your users logon using smartcards or a biometric device? Do they always
log into the domain, rather than locally while away from the office? 

-- 
Tim Springston
Microsoft Corporation
This posting is provided "AS IS" with no warranties, and confers no rights.
"Randy Bickford" <randyb64@hotmail.com> wrote in message
news:PSXTb.84907$U%5.455374@attbi_s03...
> Hi -
> The situation has always been that once a user logs on to an NT/2K/XP
> machine with a domain account, that user can remove the computer from the
> network and still log on to the computer using cached creds.
> Group Policy exposes the registry setting for this under Local Security
> Policy in "Interactive Logon: Number of cached logons......".  The default
> number is 10.  Ever since I first saw this in W2K, I wondered why our
laptop
> users can go away for months without connecting to our network yet are
able
> to logon more than 10 times without any failure.  We're on an NT4 domain
but
> the Local Policy should still apply on our W2K and XP machines.
> What's up with that?  Not really a problem (just the opposite, in fact)
but
> I'm curious.
> Thanks.
>
>

Relevant Pages

  • RE: Cant set Local Security policies. They fail to save
    ... predefined Security Template on SBS 2003 to restore security groups ... run "gpupdate.exe /force" under command prompt to force the policy ... reboot the Server to test. ... and then logon to client computer to test if user can save system logs. ...
    (microsoft.public.windows.server.sbs)
  • RE: Event ID 537 and Kerberos
    ... a logon type of 3 translates to Network. ... Click Services tab and select Hide All Microsoft Services and Disable ... Step 4: Configure account lockout policy. ... and then click Account Lockout Policy. ...
    (microsoft.public.windows.server.sbs)
  • Re: Remote Client Configuration
    ... Thanks for quickly updates. ... Just as I know, if you only logon the domain with cache credential, the ... group policy will not be updates, instead it will use the old policy that ... dial up VPN connection to logon SBS domain once-in-a-while for the group ...
    (microsoft.public.windows.server.sbs)
  • RE: Remote Desktop not working after SP1
    ... "The local policy does not permit you to logon interactively" error message ... Remote Desktop Users ... Use the ISAinfo utility to collect the ISA configuration information: ...
    (microsoft.public.windows.server.sbs)
  • Re: IIS Security Problems
    ... reason why if auditing of logon events is enabled in Local Security Policy ...
    (microsoft.public.windowsxp.security_admin)