Re: Cached Credentials stop working all of a sudden

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



This is a confusing settings: http://support.microsoft.com/kb/825805
Cached credentials do not time out, but they may stop working:
http://support.microsoft.com/kb/818088. Do you have web services, OWA, TS or
other ways people may change their password?
If a machine is going to be off the domain that long I would generally
remove it from the domain.
Anthony
http://www.airdesk.co.uk



"Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb66a31298caaf1a67acbbc0@xxxxxxxxxxxxxxxxxxxxxxx
Hello HarryH,

Is this policy set somewhere i your domain, maybe counting to 60 (round 2
month)?
Computer Configuration->Windows Setting->Local Policy->Security
Interactive Logon: Number of previous logons to cache:
Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Hello,

we have a Domain built on a mixture of 2003- and 2000-based domain
controllers. We have lots of people who are on the road regularly
using notebooks. Some people only log on to the domain once every half
a year. When they are on the road they log on using cached
credentials. They do not have local admin permissions and we do not
allow them to use a local user account (this has been dictated by
company management).

About once every 2 months we have a case where some laptop user all of
a sudden cannot use his cached credentials anymore. The system shows a
message, that the domain cannot be contacted and that's it. This hits
different people on different laptops without any warning. It has
actually happened to myself when I was on a one-week-vacation.

If we connect the laptop to the network and have the person log on
"properly" the problem goes away and cached credentials work. Some
people have RAS permissions and we have been able to "solve" the
problem by having them log on using RAS.

We do not have a GP defining the use of cached credentials so the
default of the last 10 logons is in place. We do not tamper with the
cahced logons in the registry either. There is no password expiration
policy in place.

Does anybody have an idea? It's a real pain having to tell someone
that he has to mail his notebook back to HQ half way around the world
so that we can log him on.

Any help or hint would be greatly appreciated!
Thanks!
HarryH




.



Relevant Pages

  • Re: Cached Credentials stop working all of a sudden
    ... thanks for your hints. ... We left the number of previous logons to cache at ... using the laptop. ... Cached credentials do not time out, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Cached Credentials stop working all of a sudden
    ... We left the number of previous logons to cache at its ... using the laptop. ... Cached credentials do not time out, ... Interactive Logon: Number of previous logons to cache: ...
    (microsoft.public.windows.server.active_directory)
  • Re: Cached Credentials stop working all of a sudden
    ... - have a client leave and rejoin the domain and see if you have a problem ... We left the number of previous logons to cache at ... using the laptop. ... Cached credentials do not time out, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Cached Credentials stop working all of a sudden
    ... Is this policy set somewhere i your domain, maybe counting to 60? ... Interactive Logon: Number of previous logons to cache: ... If we connect the laptop to the network and have the person log on ... "properly" the problem goes away and cached credentials work. ...
    (microsoft.public.windows.server.active_directory)
  • RE: Testing two bank laptops. winxp vpn client
    ... Disable cached credentials via a domain Group Policy Object. ... to do this is by creating a container group for the laptop machine accounts ... Audit your website security with Acunetix Web Vulnerability Scanner: ... Up to 75% of cyber attacks are launched on shopping carts, forms, ...
    (Pen-Test)