Windows Vista on Dell Laptop

[Guest]

I have a general issue. Our network use kerberos for authentication. The
laptops are joined to our local domain. The users authenticated against our
kerberos server.

In previous windows xp and 2000, after a user log on to the computer, he did
not have to be on the network to logon to the computers.

Now, with windows vista, if the laptop does not see the domain, when on the
road or traveling, the users keeps getting an error user authentication
failed.

Any ideas why?

 

[AJR]

Doesn't "if the laptop does not see the domain...." answer your question?

 

[Guest]

well, if the laptop is on the road, why does it need to see the domain?

The lapto only needs to see the domain when it is on the network. The user
should be allow to use the logon to the laptop without seing a domain.

Help!!!!

 

[Joe Guidera]

They should be able to log on using cached credentials when the domain is
not reachable unless a policy preventing cached credentials is in use.

J

 

[Guest]

Joe,
Your comment makes perfect sense. I'd like to know which policies is making
to do this. I never seen this before.

 

[Joe Guidera]

Check out
http://www.microsoft.com/technet/windowsvista/security/security_group_policy_settings.mspx

In particular:
The settings for "Interactive Logon"

Number of previous logons to cache - if it's set to 0 (e.g. a machine in a
SSLF configuration) you can't logon unless connected to the domain.

Require domain controller authentication to unlock workstation - if enabled
and you can't get to the domain you're toast...

Best of luck,
J