Trying to understand cached credentials

[SA]

Hi,
I am trying to understand type different types of cached credentials. I
want to disable the clients from storing the cached LAN manager hash to
prevent people from running things like PWdump. My questions are:

1) What group policy is this done on (ie DOmain Controller Security Policy)
2) How does this affect the cached credential logon process? Will the
client still be able to logon if the DC is not available?

Thanks,
SA.

 

[Laura E. Hunter \(MVP\)]

The best step-by-step in existence on this topic is from Mark Minasi's
newsletter archives on www.minasi.com

http://www.minasi.com/showdoc.asp?docname=nws0304.htm

I think that link requires (free) registration, but it's entirely worth it.
Mark's newsletters are required reading for me.

 

[SA]

Laura,
You are right. That was simply awesome.

-SA.