General discussion

  • Creator
    Topic
  • #2180061

    Blocking PC logon without a domain

    Locked

    by sprocket ·

    Is there a active directory setting that changes XP Settings to prevent people logging when the domain is unavaliable.

All Comments

  • Author
    Replies
    • #3119545

      Reply To: Blocking PC logon without a domain

      by bfilmfan ·

      In reply to Blocking PC logon without a domain

      Set the following registry key to 0:

      Hive: HKEY_LOCAL_MACHINE
      Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon
      Name: CachedLogonsCount
      Type: REG_SZ
      Value: 0 no cached pw

    • #3120185

      Reply To: Blocking PC logon without a domain

      by infoguy ·

      In reply to Blocking PC logon without a domain

      Unfortunately not. If the domain is unavailable, then active directory is also unavailable, therefore no setting in the active directory could be applied to the computer.

      However, if you make the following registry change, you will get the desired results.

      Using regedit or your favorite registry editor, browse to:

      HKEY_LOCAL_MACHINE
      \SOFTWARE
      \Microsoft
      \Windows NT
      \CurrentVersion
      \Winlogon

      Right-click on cachedlogonsount
      Click Modify
      Type the number zero (“0”)
      Click Ok

      Note that the CachedLogonsCount is a number indicating how many users the computer should remember cached credentials for, not how many times a user can log on on with cached credentials in a row. So if the domain is unavailable, only local users of the computer will be able to log on.

    • #3120163

      Reply To: Blocking PC logon without a domain

      by sprocket ·

      In reply to Blocking PC logon without a domain

      This question was closed by the author

Viewing 2 reply threads