Re: Laptop Users in AD

From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 08/26/04 

Date: Wed, 25 Aug 2004 21:30:23 -0400

Correct as this is using cached information, if you haven't cached the info, you
can't use it. :o) 

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net
Bob Christian wrote:
> One caveat...you will first have to have them log on when their system is
> connected to the network.  After that happens the client can then logon to
> their laptop when it is disconnected from the network.
> 
> Bob
> 
> Bob
> "Joe Richards [MVP]" <humorexpress@hotmail.com> wrote in message
> news:uSiYaYuiEHA.2140@TK2MSFTNGP15.phx.gbl...
> 
>>The entry you already have. If you want to disallow completely that
> 
> capability
> 
>>you set the value to 0.
>>
>>--
>>Joe Richards Microsoft MVP Windows Server Directory Services
>>www.joeware.net
>>
>>
>>
>>Adam Holmes wrote:
>>
>>>Ok, with that being said, is there a group policy string that I can set
> 
> that
> 
>>>will allow them to log on with cached credentials when not connected to
> 
> the
> 
>>>domain?
>>>
>>>"Joe Richards [MVP]" wrote:
>>>
>>>
>>>
>>>>That value tells you how many IDs will be cached, not how many times
> 
> they can be
> 
>>>>logged on. So if you set it to 50, it means cached entries for 50 people
> 
> will be
> 
>>>>maintained. When they are on the network and the DCs are responding it
> 
> will
> 
>>>>authenticate normally.
>>>>
>>>>  joe
>>>>
>>>>--
>>>>Joe Richards Microsoft MVP Windows Server Directory Services
>>>>www.joeware.net
>>>>
>>>>
>>>>
>>>>Adam Holmes wrote:
>>>>
>>>>
>>>>>I briefly searched and found no past questions similar.
>>>>>
>>>>>I want the laptop users in my Corporation to be able to log onto their
>>>>>domain user account when not connected inside my network or @ any ISP
> 
> for
> 
>>>>>that matter.  If i set the GP on an OU for laptop computer accounts
> 
> under
> 
>>>>>comp config->windows settings->security options-> Interactive logon:
> 
> Number
> 
>>>>>of previous logons to cache (incase DC is not available) to 50, will
> 
> they be
> 
>>>>>able to log on 50 times outside of the network with no physical domain
> 
> access
> 
>>>>>to their Domain User account on their laptop?
>>>>>
>>>>>And when they are in the network, am I right in assuming it will first
> 
> look
> 
>>>>>for a DC before using a cached logon?
>>>>
> 
>

Relevant Pages