Number of days without DC contact

[Jim in Arizona]

If a user has a laptop that connects to the LAN and authenticates with
the DC, how long could the user go without being connected to the LAN
and still be able to log into his laptop using his domain username?

I looked here:
http://www.microsoft.com/windowsserver2003/evaluation/overview/technologies/kerberos.mspx

and here:
http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/confeat/kerberos.mspx

and a few other places but couldn't find the answer.

Thanks,
Jim

 

[Jorge de Almeida Pinto [MVP - DS]]

as long as the use of cached credentials is enabled, the user will be able
to logon onto the laptop without a DC

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx

 

[Jim in Arizona]

as long as the use of cached credentials is enabled, the user will be
able to logon onto the laptop without a DC

I'm guessing then that cached credentials is enabled by default? And
that being the case, the the number of days is indefinite then?

Just a scenario question then (if you know, otherwise no big deal)
(because a co-worker just asked me this and I didn't know).

User Joe goes on a trip with his laptop that was joined to the domain.
Two weeks into his trip, he changes his password on his laptop. A few
weeks later he returns to the home office and reconnects his workstation
to the domain. He goes to log in; which password would he use? Would the
workstation first let the DC know that the password changed and then joe
could use his newer password, or would he have to use his older password
that ActiveDirectory is still aware of?

 

[Andrei Ungureanu]

He can not change the password without DC connectivity.