Internet Setting for DNSCacheEnabled

[Guest]

What is the registry entry DNSCacheEnabled? (can't find ANY info on it!?)
Where (if applicable) is the setting toggled in the Internet Connections?

Background:

I'm the web dev for an intranet and we are trying to use Windows Integrated
Authentication for all of our apps, most of which have a web front end and a
SQL backend (on a different server - aka double-hop). Our network is
comprised mostly of Windows XP clients and Windows 2000 servers.

We've been having a problem with a few people (about 8 out of 200) - their
credentials aren't passed - Kerberos gives a "Principal Unknown" error. We
traced it to a registry setting in Current User > Windows > Current Version >
Internet Settings called DNSCacheEnabled. In all cases it existed we found
that deleting it or setting it from 0 to 1 (enabling it) fixed the
authentication problem.

Unfortunately it is sporatically reappearing for these users. Some of them
are old employees, some new, some roaming, some not. Restarting has worked
for them.

Any leads are helpful, including suggestions of better forums to post this in.

Thank you!

 

[photog]

What is the registry entry DNSCacheEnabled? (can't find ANY info on it!?)
Where (if applicable) is the setting toggled in the Internet Connections?

Background:

I'm the web dev for an intranet and we are trying to use Windows Integrated
Authentication for all of our apps, most of which have a web front end and a
SQL backend (on a different server - aka double-hop). Our network is
comprised mostly of Windows XP clients and Windows 2000 servers.

We've been having a problem with a few people (about 8 out of 200) - their
credentials aren't passed - Kerberos gives a "Principal Unknown" error. We
traced it to a registry setting in Current User > Windows > Current Version >
Internet Settings called DNSCacheEnabled. In all cases it existed we found
that deleting it or setting it from 0 to 1 (enabling it) fixed the
authentication problem.

Unfortunately it is sporatically reappearing for these users. Some of them
are old employees, some new, some roaming, some not. Restarting has worked
for them.

Any leads are helpful, including suggestions of better forums to post this in.

Thank you!

See "Broadband Internet Connection Tweaking" here:
http://www.bughy333.go.ro/pgid1_site_RO.html
Good Luck
photog

 

[Guest]

Thanks for your response. I have searched online for references to
DNSCacheEnabled and found a few references to speeding up IE and to synching
to PDA's, but nothing speaking to that registry entry in particular. In the
case of our users with issues, none of them have been editing the registry
themselves, and none in question have PDAs. Furthermore we don't set nor see
DNSCacheEnabled on most users systems.

I did read the link you sent and did some investigating based on their
various suggestions. This seems to have nothing to do wtih checking for a
new page everytime, automatically or never (Under IE general options > Temp
Files > Settings) because I tested these settings, logged off and back on and
not only did it not affect our applications (authentication), the only
registry entry it modified is SyncMode5.

 

[photog]

We've been having a problem with a few people (about 8 out of 200) - their
credentials aren't passed - Kerberos gives a "Principal Unknown" error...

<snip>

I know not of Kibros but the first result returned by Google and several
others near the top looked relevant:
http://www.google.com/search?num=100&hl=en&lr=&q=Kerberos+"principal+unknown"+error
Good Luck
photog