Windows Forum

Ask something
Discussion Locked

Blocking PC logon without a domain

0 helpful
5 replies

by sprocket

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Is there a active directory setting that changes XP Settings to prevent people logging when the domain is unavaliable.

5 replies

by bfilmfan

Set the following registry key to 0:

Hive: HKEY_LOCAL_MACHINE
Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon
Name: CachedLogonsCount
Type: REG_SZ
Value: 0 no cached pw

by infoguy

Unfortunately not. If the domain is unavailable, then active directory is also unavailable, therefore no setting in the active directory could be applied to the computer.

However, if you make the following registry change, you will get the desired results.

Using regedit or your favorite registry editor, browse to:

HKEY_LOCAL_MACHINE
\SOFTWARE
\Microsoft
\Windows NT
\CurrentVersion
\Winlogon

Right-click on cachedlogonsount
Click Modify
Type the number zero ("0")
Click Ok

Note that the CachedLogonsCount is a number indicating how many users the computer should remember cached credentials for, not how many times a user can log on on with cached credentials in a row. So if the domain is unavailable, only local users of the computer will be able to log on.

This discussion is closed to new replies.