David Schäfer wrote:

How can I configure Windows that the domain Account is cached and the users
can login to their machines, if there are outside the office network?

Is this possible?

Yes it is actually, but I think I am going to loose a bit of hair tracking down 
which package I stuck that setting in. I know it works, because it is in our 
standard! ;-)

Basically what I did is to set the policy for expiring cached credentials to never stop trusting cached credentials. Mind you, doing so is a double edge sword. Once done, you can lock a person at the server, but Windows will not care.

Also the obvious, you'll want local profiles on those laptops.

I have a grep running, will post once I am able to dig up where I hid that. It's not in the obvious "package that joins workstations to the Samba PDC" which had been my assumption of where I would stick that.

--
Michael Lueck
Lueck Data Systems
http://www.lueckdatasystems.com/

Remove the upper case letters NOSPAM to contact me directly.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to