Solved

Does XP Pro cache domain users passwords?

Posted on 2004-08-26
1
738 Views
Last Modified: 2008-03-06
I am setting up some XP Pro PCs that are for users that will log onto the domain but be in a remote office connected by a VPN over the interent.  I know there will be some times when the connection will be down and they wont be able to connect to the domain controller, but i still want them to access their machines.
I did a little test and it seems once a user logs on to a machine once, the machine caches the password.  I then disconnected the PC from the network and tried to log in again and was able to.  Of course no network resources were available but the user was able to log into the machine so it must store the users password locally.  I tried reconnecting, logging in as another user and then disconnecting the machine from the network again.  Now while disconnected i was able to log in under both user names, so i dont think that only the most recent logon username/password combo is cached.  

Can anyone confirm that all domain users who logon to an XP Pro machine have their credentials cached locally on that machine so they can log in again even if the machine is not connected to the network?
And if anyone has some links to more info on this that would be helpful too.

Edited to add - They are logging on to Windows 2003 Server with AD

Thanks,
Tom
0
Comment
Question by:saunaG
1 Comment
 
LVL 32

Accepted Solution

by:
Luc Franken earned 500 total points
Comment Utility
Hi saunaG,

This is true, winXP can use cached credentials to be able to logon even without the network connection. Also roaming profiles are cached locally to be able to access those.
And there's enough for you to worry about, please see this:
http://support.microsoft.com/search/default.aspx?InCC_hdn=true&QuerySource=gASr_Query&Catalog=LCID%3D1033%26CDID%3DEN-US-KB%26PRODLISTSRC%3DON&Product=winxp&Queryc=cached+credentials&Query=cached+credentials&KeywordType=ALL&maxResults=25&Titles=false&numDays=&InCC=on

There are a lot of ways cached credentials can fail, but if you keep winXP up-to-date, you're pretty safe using them.

Greetings,

LucF
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Can I legally transfer my OEM version of Windows to another PC?  (AKA - Can I put a new systemboard in my OEM PC?) Few of us are both IT and legal experts but we all have our own views of Microsoft's licensing rules and how they apply.  There are…
If your system is showing symptoms of browser hijacks or 'google search redirects' check out my other article (http://rdsrc.us/u3GP7A) first and run the tool TDSSKiller (http://rdsrc.us/GDBBs4) to get rid of the infection. Once done, and if the …
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now