Cached Credentials Expiring

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

I recently posted this question on the XP group however no one there seems to
have an answer and one person suggested I try here. Any way here it is ....

I have seen this question asked many times but without a verifiable answer.

There are numerous LAPTOP users who logon with cached credentials
successfully day after day. Then one day the users get an error advising they
can not be logged on because there are no DCs available. If we log them on
attached to the network their credentials are refreshed and they can again
logon while disconnected from the network using the SAME cahed credentials as
before the error.

One thing we are fairly sure of is that it has nothing to do with the
"interactive Lgon: number of previous logons to cache ...." policy. ( i am on
the # of sets of credentials side of this fence from what I have seen (as
apposed to the number of times a credential set can be used))

for background these user accounts are used to auto logon to a kiosk
environment for training purposes. Once logged on there is often a VPN
connection established for application demonstrations and all works fine
until this error condition occurrs.

At this stage I am starting to wonder if part of the credentials caching
process is tied to the computer's workstation account password and if this is
changed (30 day expiry ) by the computer while connected through VPN the
computer is then unable to read previously cached credentials, hence the
requirement to refresh them.

Has anyone found a verifiable solution\workaround to this problem?
Is it possible that the workstation password (or some other event) is
affecting the computer's ability to read the cached credentials?
Any other thoughts?

Thanks in advance for replies.

.

Relevant Pages

  • Re: Authentication woes
    ... User account and laptop account are members of the domain/ AD forest. ... Given the correct credentials user can browse the DC's ... If the user logon with cached credentials, there is on additional check or bypassing the account infos to the DC's when you connect to it. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Prompted for credentials. Invalid ticket?
    ... cached credentials in the protected storage. ... This is the cause of the logon failures the remote ... the AutoUpdate service in the McAfee Anti-Virus software that affects the ...
    (microsoft.public.windows.server.sbs)
  • Re: Cannot connect to computer not joined to domain
    ... (cached credentials). ... credentials cannot be checked and does not present me a login-dialog. ... > Hi Erik, ... > explains why it's looking for a DC during the logon ...
    (microsoft.public.win2000.networking)
  • Re: Cannot connect to computer not joined to domain
    ... (cached credentials). ... credentials cannot be checked and does not present me a login-dialog. ... > Hi Erik, ... > explains why it's looking for a DC during the logon ...
    (microsoft.public.windows.server.networking)
  • Re: Prompted for credentials. Invalid ticket?
    ... cached credentials in the protected storage. ... This is the cause of the logon failures the remote ... the AutoUpdate service in the McAfee Anti-Virus software that affects the ...
    (microsoft.public.windows.server.sbs)