RE: [ActiveDir] Cached Credentials

[Rich Milburn]

I think XP implements cached credentials as an optional “performance enhancement” (but don’t remember where I read this).  If the DCs are unavailable only GPO changes won’t take effect, it uses the old settings – at least it certainly appears to.  The point about network resources is if the DCs are unavailable then either you can’t see the resource servers or if you can then they can’t see the DCs.  In that case, you won’t be able to use a resource (member) server because it has to check your authentication against a DC.  null session shares or access using local server accounts would still work, but not mail, etc.   From: Matjaz Ladava [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 29, 2003 2:14 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Cached Credentials   Caching credentials happen, when you can not contact DC during logon process. If that happens then your GPO's wont be applied, login scripts won't run. That doesn't necessary mean that you won't be able to access the network, as if only DC are not available, and name-resolution is working, then you could be able to access some network resources. Again this depends if this resources need authentication or not. You always have possibility to turn off cached credentials if you need for security purposes.   Regards   Matjaz Ladava   ----- Original Message ----- From: Santhosh Sivarajan To: [EMAIL PROTECTED] Sent: Wednesday, October 29, 2003 8:20 PM Subject: [ActiveDir] Cached Credentials   Hi there,   I am trying to explain to a client the difference on the network between using Cached Credentials and Domain Credentials . I know a few things about group policy updates, such as password expiration notice, when using Cached  Credentials.    What else, other than Group policy updates,   won’t happen when using Cached  Credentials?     I couldn’t find a good explanation or any technical documentation on this.        Can anyone  give me a good technical explanation?   Thanks, Santhosh -------APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE------- PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or any attachments. This information is strictly confidential and may be subject to attorney-client privilege. This message is intended only for the use of the named addressee. If you are not the intended recipient of this message, unauthorized forwarding, printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, you should kindly notify the sender by reply e-mail and immediately destroy this message. Unauthorized interception of this e-mail is a violation of federal criminal law. Applebee's International, Inc. reserves the right to monitor and review the content of all messages sent to and from this e-mail address. Messages sent to or from this e-mail address may be stored on the Applebee's International, Inc. e-mail system.