Windows XP Caching of Credentials

[Sam Amsha]

Hello there,

We have been experiencing problems with user domain
accounts getting locked. We login using the Netware
client 4.8x/4.9x(the novell and local account credentials
are the same) but the Domain account has the same login
name but a different password (part of the department's
security policy).

When the user logs in the first couple of times the user
is asked for a domain name and password to authenticate to
a resource (e.g. drive mapping or a net use command) then
after a couple of times (and after the user reboots a
couple of times) the domain account gets locked?

We have set the "Interactive logon: Number of previous
logons to cache (in case domain controller is not
available)" ==>> 0 logons.

Still same problem? Could someone help. Need to stop
account from being locked and probably ask for domain
authentication every logon / use of resource.

Thanks

Sam.

 

[Curtis Clay III [MSFT]]

Hello Sam,
1. Up your account lockout policy to 50 bad password attempts.

http://www.microsoft.com/downloads/details.aspx?FamilyID=8c8e0d90-a13b-4977-
a4fc-3e2b67e3748e&displaylang=en

2. Re-evaluate your security in whicn your Novell and NT clients are using
same names but different passwords.

NT is going to lockout any accounts with passwords it doesn't recognize.
And this scenario is working exactly as designed. Cached credentials will
not play a factor in this situation.

This posting is provided "AS IS" with no warranties, and confers no rights.