Guest GCBN Posted July 24, 2007 Posted July 24, 2007 Hello, I have a windows 2003 server, clients are winxp sp2 All pc's are configured to logon on my domain. Some of the users work a lot via VPN and come not often in the office. Sometimes they work on other locations for several months. After some time ( don't now exactly how long) they cannot not more logon ( with (mydomain\username) on there workstation when they are not connecetd to the domain. Is there somewhere a setting that can prevent this block? Thank you,
Guest Greg O Posted July 24, 2007 Posted July 24, 2007 Re: no access after ... "GCBN" <gc154460@belgacom.net> wrote in message news:%23v%238gYezHHA.1208@TK2MSFTNGP03.phx.gbl... > Hello, > > I have a windows 2003 server, clients are winxp sp2 > All pc's are configured to logon on my domain. > Some of the users work a lot via VPN and come not often in the office. > Sometimes they work on other locations for several months. > After some time ( don't now exactly how long) they cannot not more > logon ( with (mydomain\username) on there workstation when they are not > connecetd to the domain. > > Is there somewhere a setting that can prevent this block? > > Thank you, > > > You can only log onto a domain a limited number of times (10 by default I think) when not connected to a domain controller. You could increase this number in group policy or they could log on as local administrators instead of the domain.
Guest Brian Spolarich Posted July 24, 2007 Posted July 24, 2007 Re: no access after ... "Greg O" <none@all.com> wrote in message news:OC1JBqezHHA.5380@TK2MSFTNGP04.phx.gbl... > You can only log onto a domain a limited number of times (10 by default I > think) when not connected to a domain controller. You could increase this > number in group policy or they could log on as local administrators > instead of the domain. That's the first I've heard of this. Where is this policy? The only policy setting I can fine that's even similar is: Computer->Windows Settings->Security Settings->Local Policies->Security Options Interactive Logon: Number of logons to cache (in case domain controller is not available) -bws
Guest Greg O Posted July 25, 2007 Posted July 25, 2007 Re: no access after ... "Brian Spolarich" <briansp@gmail.com> wrote in message news:%23kxU29gzHHA.5380@TK2MSFTNGP04.phx.gbl... > "Greg O" <none@all.com> wrote in message > news:OC1JBqezHHA.5380@TK2MSFTNGP04.phx.gbl... >> You can only log onto a domain a limited number of times (10 by default I >> think) when not connected to a domain controller. You could increase this >> number in group policy or they could log on as local administrators >> instead of the domain. > > That's the first I've heard of this. Where is this policy? The only > policy setting I can fine that's even similar is: > > Computer->Windows Settings->Security Settings->Local Policies->Security > Options > Interactive Logon: Number of logons to cache (in case domain controller > is not available) > > -bws > That's the one I think. I took your post to mean that people were taking computers off the network and then after a number of logons they could no longer do so. That in effect is the same as not being able to contact the domain controller on a network. So if you increased this number to the maximum that might solve the problem. The other way is to log on as a local administrator and most of their programs should still run.
Recommended Posts