Re: pwdump 2 & 3

From: Barrie Dempster (barrie@reboot-robot.net)
Date: Wed Dec 22 2004 - 05:34:44 EST


On Thu, 2004-12-16 at 18:22 -0500, Chris Buechler wrote:
<snip>
> Also, FYI, you can set this domain-wide in group policy if you have
> Active Directory. Under Computer Configuration, Windows Settings,
> Local Policies, Security Options. "Interactive logon: Number of
> previous logons to cache (in case domain controller is not available)"
<snip>

Your laptops could be moved to a separate OU from your desktops (common
setup as GPO differs often between the two) then you could have all the
Desktop machines set to 0 and the laptops set to 1 - most laptops are
single user machines anyway.

This would give you the best of both, your laptop users would retain
their single profile and be able to access their machines whilst not
connected to the network and your Desktop machines wouldn't cache
credentials.

With Regards..
Barrie Dempster (zeedo) - Fortiter et Strenue

  http://www.bsrf.org.uk

[ gpg --recv-keys --keyserver www.keyserver.net 0x96025FD0 ]





This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:11 EDT