I have a client that have employees that will need their laptops binded to the domain when on location... The question I have is that they go off-site for up to 12 weeks at a time and I know that there is an issue with logins
after a certain amount of times if you have not refreshed you login credentials... Is there a way to change this through a GPO?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
What I described above is to set the local policy on each laptop. You can however set it in a AD GPO at the same location but the policy name may be:
"Number of previous logons to cache (in case domain controller is not available)"
At least it is in W2K.
However, I don't think it is a safe security practice to place this in a domain wide GPO. It should be set to a large number for only those machines that need it... i.e. your traveling laptops.
enjoy. fs
See this as well:
http://technet2.microsoft.
You may also run into issues with your domain password policy. If your passwords are set to expire in 90 days or over, you should be ok (depending on when it was last set). If it's set lower like 60 days, the user's password will expire and the user will not be be able to update it since the domain is unavailable.
Business Accounts
Answer for Membership
by: FixingStuffPosted on 2007-04-17 at 09:43:50ID: 18925594
Yes. In Group Policy editor (start, run, GPEDIT.MSC) Navigate to:
Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options
Change the "Interactive logon: Number of previous logons to cache (in case domain controller is not available)"
I believe the default is 10. Change it to a reasonable number of logins for the off-site time.
fs