There is a limitation in the number of logon that a user can perform in a computer that has not connection with its domain controller. In this case, the logon process use the cached logon information stored in the computer.
This number is by default 10 for Windows XP and Windows Vista.
This default behaviour could be changed using the Key CachedLogonsCount stored in the Registry Path HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\winlogon
Valid values for this key are from 0 to 50.
In case you want to deny logon for domain login accounts if the active directory domain is not reachable you can set this value to 0.
Logon with cached identity : [CachedLogonsCount]
Posted in Registry Tips.
– June 20, 2008
0 Responses
Stay in touch with the conversation, subscribe to the RSS feed for comments on this post.