kev

Is there a way to prevent laptop users from login into locally from their
previous caches? I don't want users to connect without a VPN connection.

Thanks again

florian frommherz [mvp]

Howdie!

kev schrieb:

Turn off Cached Credentials:
CompConf\Windows Setting\Local Policy\Security Options:
"Interactive Logon: Number of previous logons to cache (in case domain
controller is not available)" - the default should be 10 - just set it
to 0 and users need to authenticate at the domain to log in.

cheers,

Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.