GPO Logon cache

[Guest]

in my GPO I ahve defined the policy to limit the Number of Domain Logins if
the DC is not available, I then reliazed I have one use who is on a laptop
adn can't always authenticate to the domain. Currently she can not use the
laptop 100% when off my network, I ahve since tried to Not define the Policy
but she still can not log in... can any one tell me the registry entry to
check that she is geting the change for this policiy.
Specificly the Policy reads; Interactive logon: Number of previous logons to
cache (in case domain controller is not available)

 

[Jon Phipps]

have her log on to the local machine rather than the domain. In the domain
logon box(log on to) click on the arrow at the right hand end of the box and
select the nondomain account. This will give access to the computer and some
of the network, but may limit domain resource accessibility.

Jon

 

[Guest]

That is what I have done for a tempory fix, but this limits her use greatly,
I need the Doamin Caching to work as before, where she could log into the
domain account, disconnected from the domain.

this allows her to map Network drives, and act as a member of the Domain,
once her VPN connection is made.... the VPN connection DOES NOT allow for
domain authentication, and this is the only way I can make this as easy as
posiabel for the end use, who is by no means computer savy

 

[BMac]

I had a similiar issue before myself. I had iinstalled a software upgrade
through the GPO for our AV. Once I got folks finished, I removed the GPO but
some users that had been absent that week came back the next week and got
the install prompt, yet they should not have gotten that prompt because I
had removed the GPO entry for it. Now they got stuck because the file path
to the install no longer existed.

Sounds like this user is stuck the same way, her domain profile won't let
the old GPO settings go. The way I fixed the problem was to login as the
user and force a gpupdate for their profile. This forced the new policy
settings to take precedence and they never got the prompt again after that.

If your user comes in sometimes, connect her mobile to your LAN and try to
force a gpupdate and see if that helps. Good luck...

-bcm