Re: CachedLogonsCount

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Torgeir Bakken \(MVP\) (Torgeir.Bakken-spam_at_hydro.com)
Date: 07/28/04 

Date: Wed, 28 Jul 2004 17:19:26 +0200

Scott Lowe wrote:

> I am trying to track down information on increasing the limit on the
> number of times a user may logon to his/her workstation when
> connectivity to their Active Directory domain is not available. It was
> my understanding that this is controlled by the CachedLogonsCount
> Registry value, and that the maximum value for this setting is 50.
>
> However, in my various web searches to confirm this information, I have
> come across a wide variety of explanations for this key, its purpose,
> and the behavior it controls.
>
> My questions therefore are these:
> 1. Is there a limit on how many times a user may logon to his/her
> workstation when no DC is available to validate the logon request?

No, there is no limit.

The logon credentials are cached forever unless the registry value
CachedLogonsCount is set to 0.

Note that the CachedLogonsCount is a number indicating for how many
users the computer should remember cached credentials for, and not
how many times a user can logo on with cached credentials in a row.

> 2. Can this limit be increased?

N/A, see 1.

> 3. Can this setting be adjusted through Group Policy?

N/A, see 1.

> Thanks in advance for your help. I am fairly certain that my
> understanding of Windows' behavior is correct, but just need some
> confirmation. 

-- 
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx

Relevant Pages

  • Re: How to execute the logon script when the network cable is connecte
    ... > logon locally. ... > runs (and also that the group policy get updated). ... Note that the CachedLogonsCount is a number indicating for how many ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windows.server.scripting)
  • Re: How to execute the logon script when the network cable is connecte
    ... > logon locally. ... > runs (and also that the group policy get updated). ... Note that the CachedLogonsCount is a number indicating for how many ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.win2000.general)
  • Re: Local password storage
    ... set CachedLogonsCount to zero, disconnected the box and tried to log on - I ... So apparently the logon cache gets cleared out at some ... > Setting it to 0 will stop it from saving the cached credentials. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Cleaning remote machines of disabled user accounts
    ... Name: Interactive logon: Number of previous logons to cache (in case domain ... Logon information for domain accounts can be cached locally so that, ... -Setting this value to 0 disables the local caching of logon information. ... ValueName: CachedLogonsCount ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Local password storage
    ... > using a domain account name. ... Setting it to 0 will stop it from saving the cached credentials. ... Note that the CachedLogonsCount is a number indicating for how many ... Disable Caching of Logon Information ...
    (microsoft.public.windowsxp.security_admin)