Re: Client Side Caching of logon credentials

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Hi,

Can you check in local and domain policy what is the value of the policy
found under:

Computer Configuration\Windows Settings\Security Settings\Local
Policies\Security Options\ here look for policy called

"Interactive logon: Number of previous logons to cache (in case domain
controller is not available)"

By default this should be set to 10. It could be that yours is set to les.

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/35958fa8-2e47-4cf9-9f11-5095e5b5525e.mspx

Note that even if you set this to e.g. 4 all four users most logon to the
computer while it is connected to domain. Once they successfully log on
their credentials are stored locally and users will be able to log on even
when they are away from the network.

--
Mike
Microsoft MVP - Windows Security

"StormRage" <StormRage@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E313A0B1-B6D4-4E22-8B8B-AAFD1E8DCCFD@xxxxxxxxxxxxxxxx
>I am using a Windows 2000 server as a domain controller with Windows 98 and
> Windows XP clients.
>
> The problem is that some of the Windows XP clients are used for
> portability.
> Therefore these domain users need to logon to the machine whilst not
> always
> connected to the domain.
>
> Most interesting regarding these Windows XP clients, is that only two
> user's
> logon credentials are "stored" in the client side cache (csc). The moment
> the
> third user tries to logon with his credentials, the machine needs to
> connected to the domain before he/she can use the machine.
>
> I need a minimum of at least four users being able to logon whilst being
> off-line.
>
> Any advice would be appreciated in this regard.


.

Relevant Pages

  • Re: Server 2K3 Remote Desktop Access - is this right place?
    ... All roads for that particular error of 'You do not have access to logon to ... On Windows Server 2003, launch GPEDIT.MSC from Start -> Run. ... Drill down and expand the following for Local Computer Policy: ... > Strange - when I activate the Remote Desktop Terminal from the server, ...
    (microsoft.public.win2000.advanced_server)
  • Re: GPO problems when logon to kerberos-realm
    ... when I put the same policy on an OU with e.g. a Windows ... problem when logon to a Terminal Server. ...
    (microsoft.public.windows.group_policy)
  • Re: local GPO question
    ... You just had the option of> synchronous or asynchronous policy processing. ... Windows XP lets you wait for the network or not. ... I had understood that turning off Fast logon optimization in>> XP ...
    (microsoft.public.win2000.group_policy)
  • Re: local GPO question
    ... synchronous or asynchronous policy processing. ... Windows XP lets you wait for the network or not. ... > "Note that Windows XP clients support Fast Logon Optimization in any ...
    (microsoft.public.win2000.group_policy)
  • Re: local GPO question
    ... I had understood that turning off Fast logon optimization in XP ... "Note that Windows XP clients support Fast Logon Optimization in any domain ... When this policy is enabled, a Windows XP client behaves in the same manner ... events wait for the network stack to start first? ...
    (microsoft.public.win2000.group_policy)