Questions

Answer for:

The system detected a possible attempt to compromise security.

Message 4 of 5

View entire thread
+
0 Votes
robo_dev

Correct, your issue is cached credentials, or lack therof.

Roaming profiles tends to break cached credentials, as do users who never logout.

I would fire up a sniffer like Wireshark and try to observe the failure...if the machine is using cached credentials properly, you should not see it sending a flurry of request packets trying to hit the DC.