Domain Credential Cache Service Pack 3

[Marc Winkler]

Hello People

We have on one of our new notebooks the problem that Windows
XP doesn't cache the domain credentials for ANY domain user.

Environment:

Client:
Dell Latitude E6400
Windows XP SP3 with all Updates
Trend Micro AntiVirus Software

Server:
Windows NT 4.0

This behavior was from the start and I already did the following:

- Deactivated the Credential Caching with setting the
registry key: HKLM/Software/Windows NT/Current
Version/Winlogon/cachedlogonscount to 0

- Reboot and logged in with a domain user or a local user

- Changed the "cachedlogonscount" back to 10 or any other number
between 1 and 50

- Reboot and login with a domain user

- Shutdown

- Boot with Network disconnected

I've looked at the Group Policies but haven't seen
anything that should prevent Credential Caching.


Any help is greatly appreciated.

Have a good time

Marc

 

[John Wunderlich]

Hello People

We have on one of our new notebooks the problem that Windows
XP doesn't cache the domain credentials for ANY domain user.

Environment:

Client:
Dell Latitude E6400
Windows XP SP3 with all Updates
Trend Micro AntiVirus Software

Server:
Windows NT 4.0

This behavior was from the start and I already did the following:

- Deactivated the Credential Caching with setting the
registry key: HKLM/Software/Windows NT/Current
Version/Winlogon/cachedlogonscount to 0

- Reboot and logged in with a domain user or a local user

- Changed the "cachedlogonscount" back to 10 or any other number
between 1 and 50

- Reboot and login with a domain user

- Shutdown

- Boot with Network disconnected

I've looked at the Group Policies but haven't seen
anything that should prevent Credential Caching.

In the Group Policy editor, there is the setting:
(Start->Run->gpedit.msc)
Local Computer Policy -> Computer Configuration ->
Windows Settings -> Security Settings -> Local Policies ->
Security Options -> Interactive Logon: Number of previous logons to cache

Presumably the same as the registry setting, but you might want to
verify it isn't being overridden.

HTH,
John

 

[Marc Winkler]

Thanks for your reply.

In the Group Policy editor, there is the setting:
(Start->Run->gpedit.msc)
Local Computer Policy -> Computer Configuration ->
Windows Settings -> Security Settings -> Local Policies ->
Security Options -> Interactive Logon: Number of previous logons to cache

Just checked it and there is the same value as defined in the registry,
therefore this group policy just changes this reg value.

I also checked with rsop.msc if another group policy overrides this
value, but also no luck there.

Since I don't get any Event Viewer Errors, ist there anyway to
activate winlogon debug or something?


Cheers Marc

 

[Marc Winkler]

At last the problem was solved.

It was a Problem with the username mapping, described in
this article:

http://lists.samba.org/archive/samba/2004-December/096994.html

Cheers, Marc

 

[John Wunderlich]

At last the problem was solved.

It was a Problem with the username mapping, described in
this article:

http://lists.samba.org/archive/samba/2004-December/096994.html

Interesting. Thanks for the feedback.
-- John