We help IT Professionals succeed at work.

Domain users and local access

Blogg
Blogg asked
on
When I setup a user account on the w2k DC, I noticed that user could log on to a w2k workstation using that user name when the DC was DOWN. This user account is NOT on the local machine only the DC.
How come the user has access to the local machine? the DC which holds the account is DOWN.
Comment
Watch Question

Commented:
It's because Windows 2000 caches the user account information so that users can still logon to their machine if the server is down, the network is down, or they are for some other reason disconnected.  You have only local computer account privileges in this state.
Commented:
To disable this feature you have to add a value CachedLogonsCount to HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon with 0 (REG_SZ). Default is 10.

Only 1 DC?

Commented:
Why "C"?

Explore More ContentExplore courses, solutions, and other research materials related to this topic.