John Caspary
asked on
Windows 10 Laptops going into the field
I have new laptops going off site for the first time. They're on the domain. How long will the user's cached credentials work? Or better to take them off the domain and join a workgroup instead?
Thanks!!!
Thanks!!!
They will basically last until the current password expires. So if you have a 40 day password refresh,policy then you have 40mdays. If you have a 120mday then you are good for 120mdays. Though you will have issues with the computer password when you bring them back to the domain.
If you want some how have computer like this connected you can have VPN prepare for them or read only domain controller.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
https://social.technet.microsoft.com/Forums/sharepoint/en-US/87e84872-c321-4b8c-b13d-0d60a003c3d3/how-long-does-windows-cache-domain-user-passwords?forum=winserversecurity
As to whether to put them in a workgroup depends on the function of what these laptops are going to be a part of. A domain joined laptop with Corporate complaint GPO's and such that you can push to it before it goes into the field is better that a non-domain joined with no corporate compliant GPO's - IMO.