Home | Troubleshooting |  Quick Setup  |  Cisco How to  |  Data Recovery  |  Forums   | Blog | IT Exam Practice | Services  | About Us | Chicagotech MVP  | Search  | Contact Us  |               Select a Topic VPN How To Network How To Remote Access How To Windows How To Internet How To New Topics   

How to disable logon using domain cached account

Bt default, the number of previous logons to cache in case domain controller is not available is
10 logons. This setting determines the number of unique users for which logon information is cached locally so that in the event a domain controller cannot be contacted on subsequent logons, a user can still log on.

To disable the cache logon, you mayhave two options.

1. Modify registry at:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

REG_SZ: cachedlogonscount
Value: 0

2. Use Local Security Policy

1) Open Control Panel
2) Open Administrative tools
3) Double Click on Local Security Policy icon
4) Point to Security Settings---Local Policies---
   Security Options.
5) You will find the, "Interactive Logon:Number of
   Privius logons to cache(In case domain ontroller
   is not available)" option which is set to 10
   logons.
6) Double click on this option and set the value to
   0 logons.
 

Post your questions, comments, feedbacks and suggestions

Contact a consultant

Related Topics