Re: Cached Credentials
- From: "Kbalz" <kbalczak@xxxxxxxxxxxxxxx>
- Date: 18 Jan 2007 08:11:10 -0800
The password was correct. He gave me the password. I attempted to log
on to the domain while it was disconnected from the net work -> got the
error. The cached credentials for my domain admin account still worked
while the computer was off the network. I plugged the computer into the
network, and it logged in fine for his domain acct.. I let it sit on
the network for about an hour.
I've now disconnected him from the network, and throughout the day am
going to log in and log out again to try and get the error again. So
far after 20 attempts and 4 hours it is still ok to log in while "on
the road" using the cached credential.
Paul Bergson [MVP-DS] wrote:
Are you sure he hasn't forgotten his password? Did you have him try and
logon to a domain machine with the same password. This would verify that he
wasn't using an incorrect one.
--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT
http://www.pbbergs.com
Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.
"Kbalz" <kbalczak@xxxxxxxxxxxxxxx> wrote in message
news:1169065835.160679.175400@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
In reference to this topic :
http://groups.google.com/group/microsoft.public.windows.server.active_directory/browse_thread/thread/4ae002c879e8c33b/919811e2e35d194d?lnk=gst&q=Interactive+Logon%3A+Number+of+previous+logons&rnum=4&hl=en#919811e2e35d194d
I have a salesman who is going to be working from home, VPN connection
in. Client is Windows XP sp2, domain is Windows 2003 R2, He has been
gone for 3 days, able to login with no direct contact with the DC.. he
has been logging in using the cached credentials, and able to VPN in
just fine.
Today he got the message "cannot log in because the domain is not
available" it seems that the token only allowed him to login a certain
amount of times before it needs to have some DC communication.
How can I set this up, I am trying to avoid him logging in locally.
I can't seem to find any security policy that fits the bill. Thanks,
.
- Follow-Ups:
- Re: Cached Credentials
- From: Kbalz
- Re: Cached Credentials
- References:
- Cached Credentials
- From: Kbalz
- Re: Cached Credentials
- From: Paul Bergson [MVP-DS]
- Cached Credentials
- Prev by Date: Re: Join existing tree to forest
- Next by Date: Re: Join existing tree to forest
- Previous by thread: Re: Cached Credentials
- Next by thread: Re: Cached Credentials
- Index(es):
Relevant Pages
|
