cached domain credentials

[myself]

If a winxp pro system that is a member of a domain is disconnected from the
domain then someone tries to login using there domain login, shouldnt it
allow login to the system using the cached credentials from the last
successful DC login?

 

[John Wunderlich]

If a winxp pro system that is a member of a domain is disconnected
from the domain then someone tries to login using their domain
login, shouldn't it allow login to the system using the cached
credentials from the last successful DC login?

Yes.
However, the credential cache is only 10-deep (only the last 10 domain
logins are cached). This can be changed.

See:
"Cached credentials security in Windows Server 2003, in Windows XP, and
in Windows 2000"
<http://support.microsoft.com/kb/913485/en-us>

"Cached domain logon information"
<http://support.microsoft.com/kb/172931/>

HTH,
John

 

[Bruce Chambers]

If a winxp pro system that is a member of a domain is disconnected from the
domain then someone tries to login using there domain login, shouldnt it
allow login to the system using the cached credentials from the last
successful DC login?

Assuming that that specific user had already logged into the computer
while it was connected to the domain, and assuming that the domain
administrator hasn't disabled the capability, yes.


--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell