Cached domain logon information

Support for Windows Vista without any service packs installed ended on April 13, 2010. To continue receiving security updates for Windows, make sure you're running Windows Vista with Service Pack 2 (SP2). For more information, refer to this Microsoft web page: Support is ending for some versions of Windows

Summary

Microsoft Windows caches previous users' logon information locally so that they can log on if a logon server is unavailable during later logon attempts.

If a domain controller is unavailable and a user's logon information is cached, the user will be prompted with a dialog that says:
A domain controller for your domain could not be contacted. You have been logged on using cached account information. Changes to your profile since you last logged on may not be available.
With caching disabled, the user is prompted with this message:
The system cannot log you on now because the domain <DOMAIN_NAME> is not available.

More Information

When you logon to Windows by using cached logon information, if the domain controller is unavailable to validate your account, you cannot access network resources that require domain validation. However, you can access network resources that do not require domain validation.

Through the registry and a resource kit utility (Regkey.exe), you can change the number of previous logon attempts that a server will cache. The valid range of values for this parameter is 0 to 50. A value of 0 turns off logon caching and any value above 50 will only cache 50 logon attempts. By default, all versions of Windows remember 10 cached logons except Windows Server 2008.

For more information the default number of cached logons in Windows Server 2008, click the following article number to view the article in the Microsoft Knowledge Base:

911605 The default value of the cachedlogonscount registry entry has changed from 10 to 25 in Windows Server 2008

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 How to back up and restore the registry in Windows
For information about how to edit the registry, view the "Changing Keys And Values" online Help topic in Registry Editor (Regedit.exe) or the "Add and Delete Information in the Registry" and "Edit Registry Data" online Help topics in Regedt32.exe. Note that you must back up the registry before you edit it.

Cached logon information is controlled by the following key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\Current Version\Winlogon\

ValueName: CachedLogonsCount
Data Type: REG_SZ
Values: 0 - 50

Any changes you make to this key require that you restart the computer for the changes to take effect.
Propiedades

Id. de artículo: 172931 - Última revisión: 09/11/2011 - Revisión: 1

Comentarios