cached credentials

[Joe]

is it posible for a person long on to get mapped drive
useing cached credentials when they login. so that if you
add something to there login script it would not show up
do to it not running the script.

How do you tell a computer not to use cached credentials.

help

thanks
Joe

 

[allan grossman [mvp]]

Hi, Joe -

If a user logs on with cached credentials login scripts
won't run because the user hasn't actually authenticated
to the domain. Windows XP will try to connect in the
background but by that time the time for the login script
to run will have already passed.

We ran into this issue when deploying VPN clients for
teleworkers and what we ended up doing was adding a
shortcut to the user's login script to their desktop and
labeling it 'map network drives'. Pretty simple,
actually.

Windows XP machines default to ten cached logins before
they have to find a domain controller - this can be
configured through a local policy (gpedit.msc) or a
domain policy.

One thing to watch, though. If you zero out the number
of cached logins and the machine can't find a DC - for
whatever reason - the user won't be able to log onto the
PC.

Hope this helps -

 

[Guest]

ok I see what you are saying. now I loged on to my xp
computer to dc and the script runs but it tell that some
system error 85 has occurred.
The local device name is already in use.

this would be the users home drive and 2 other mapped
drives. where is this coming from that there mapped befor
the login script.

thanks

 

[allan grossman [mvp]]

I'd look for persistent drive mappings or a script in the
user's startup folder ;-)

From a command prompt, type 'net help use' and you'll see
explanations for all the switches available. My guess is
someone manually mapped a drive with a /persistent
switch. You can use the /delete switch with the 'net
use' command to delete a persistent mapping.

Good luck!

 

[joe]

I used the net use command then net use x: /delete on all
the drives then did net use agen there where no drives. I
loged in and script ran ok on my pc. loged out and login
agen on my pc it gave me the same errors about the drive
being there. any ideas?

one more thing where can set the number of time you login
cached I like to set it to two. I know you gpedit.msc but
I couldn't find where you set that number.

Thanks
Joe