Power Users

  • Thread starter Thread starter Denis
  • Start date Start date
D

Denis

We have a Windows 2003 Active Directory Domain.

We have PCs with Domain Users added to them as Power Users. Now, whenever
the DC is down, then also these guys are able to logon to their PCs with
their Domain Logon User IDs.

How do I restrict this?

Thanks in Advance.

Regards,
Denis Dudhia
 
That they can log on when a DC is down has nothing to do with them being
Power Users. The default behavior for Windows is to create and store cached
credentials (containing password verifiers) on client workstations so that
users can log on when not connected to the network.

You can disable this functionality on clients
(http://support.microsoft.com/kb/172931/en-us), but I'd advise against it --
the default behavior allows your users to log on to their computers and
continue working even if a domain controller is unavailable. What security
risk do you perceive exists with this behavior?
 
Back
Top