Interactive logon: Number of previous logons to cache (in case domain controller is not available)

Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options

Description

Determines the number of times a user can log on to a Windows domain using cached account information.

Logon information for domain accounts can be cached locally so that, in the event a domain controller cannot be contacted on subsequent logons, a user can still log on. This setting determines the number of unique users for which logon information is cached locally.

If a domain controller is unavailable and a user's logon information is cached, the user is prompted with the following message:

A domain controller for your domain could not be contacted. You have been logged on using cached account information. Changes to your profile since you last logged on may not be available.

If a domain controller is unavailable and a user's logon information is not cached, the user is prompted with this message:

The system cannot log you on now because the domain <DOMAIN_NAME> is not available.

Default: 10.

 

Note

Setting this value to 0 disables the local caching of logon information.

The maximum value for this setting is 50.

For more information, see:

Security Configuration Manager Tools


Top of pageTop of page