|
But you could still access web servers and others. Not all
network resources are file based ;-)
Regards
Matjaz Ladava
----- Original Message -----
Sent: Wednesday, October 29, 2003 10:12
PM
Subject: RE: [ActiveDir] Cached
Credentials
I think XP implements
cached credentials as an optional “performance enhancement” (but don’t
remember where I read this). If the DCs are unavailable only GPO
changes won’t take effect, it
uses the old settings – at least it certainly appears to. The point
about network resources is if the DCs are unavailable then either you can’t
see the resource servers or if you can then they can’t see the DCs. In
that case, you won’t be able to use a resource (member) server because it has
to check your authentication against a DC. null session shares or access
using local server accounts would still work, but not mail,
etc.
From: Matjaz
Ladava [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 29, 2003 2:14
PM To:
[EMAIL PROTECTED] Subject: Re: [ActiveDir] Cached
Credentials
Caching credentials happen, when
you can not contact DC during logon process. If that happens then your GPO's
wont be applied, login scripts won't run. That doesn't necessary mean that you
won't be able to access the network, as if only DC are not available, and
name-resolution is working, then you could be able to access some network
resources. Again this depends if this resources need authentication or not.
You always have possibility to turn off cached credentials if you need for
security purposes.
----- Original Message -----
Sent:
Wednesday, October 29, 2003 8:20 PM
Subject:
[ActiveDir] Cached Credentials
Hi there,
I am trying to explain to a client
the difference on the network between using Cached
Credentials and Domain Credentials . I know a few things
about group policy updates, such as password expiration
notice, when using Cached Credentials.
What else, other than
Group policy updates, won’t
happen when using Cached Credentials?
I couldn’t find a good explanation or any technical documentation on
this.
Can anyone give me a good technical
explanation?
Thanks,
Santhosh
-------APPLEBEE'S INTERNATIONAL, INC.
CONFIDENTIALITY NOTICE------- PRIVILEGED / CONFIDENTIAL INFORMATION may be
contained in this message or any attachments. This information is strictly
confidential and may be subject to attorney-client privilege. This message is
intended only for the use of the named addressee. If you are not the intended
recipient of this message, unauthorized forwarding, printing, copying,
distribution, or using such information is strictly prohibited and may be
unlawful. If you have received this in error, you should kindly notify the
sender by reply e-mail and immediately destroy this message. Unauthorized
interception of this e-mail is a violation of federal criminal law. Applebee's
International, Inc. reserves the right to monitor and review the content of
all messages sent to and from this e-mail address. Messages sent to or from
this e-mail address may be stored on the Applebee's International, Inc. e-mail
system.
|