Do not want to require Domain Authentication

[balithecat]

When I log into the domain, I logon as a regualr user. I use to be able to logon to my Domain ID, without being connected to the domain - ie no Network VPN connectivity. As long as I entered my id and apssword - everything was fine.

Now it is telling me that there is no domain available and will not allow me to login. I am the local administrator to my laptop, and have full controll over it. So is there a policy on the local PC that I must change so it will allow me to logon locally with the domain ID?

 

[cmeagan656]

Is this the same laptop that you mention here:

http://www.tek-tips.com/viewthread.cfm?qid=1529846?

If so, should you not have returned it to your former company (as you mentioned that you were going to do) and asked them if there was any chance that they would retrieve your personal data for you? Data, which IMHO, should not have been on a company owned laptop in the first place.

Cheers.

 

[balithecat]

no - no the same one - but thanks for looking it up and wondering. Obviously I wouldn't have full admin rights to a laptop owned by a company. No - this is for a laptop I am setting up on my own domain - I just don't know how to use Group policy editors that well any more.

 

[cmeagan656]

Obviously I wouldn't have full admin rights to a laptop owned by a company...

Actually, not so obviously. A lot of companies give their users local admin rights to their laptops, particularly if they are remote users. I don't do it, but I can see why some admins would.

Cheers.

 

[balithecat]

well thanks for playing cop for my old company. That laptop is done and gone - and if I was local administrator to it - I wouldn't had the problem of getting my files off of it, now would I?

Does any one have any helpful advice on how not to require Domain Authentication on a locally cached domain account?

 

[BadBigBen]

see if this is any help...


Assign "Log On locally" Rights to Windows Domain Controller

http://support.microsoft.com/kb/234237

Step-by-Step Guide to Understanding the Group Policy Feature Set

http://technet.microsoft.com/en-us/library/bb742376.aspx

Log on

http://www.computing.net/answers/windows-2003/log-on/4780.html

Ben

"If it works don't fix it! If it doesn't use a sledgehammer..."

How to ask a question, when posting them to a professional forum.

 

[Grenage]

So you have a domain controller in your house, and you want to log into your laptop when the domain controller is not available?

"We can categorically state that we have not released man-eating badgers into the area" - Major Mike Shearer

 

[balithecat]

I have a windows 2008 Server I just got in and I was adding my laptops to the newly created domain. I was screwing around with the group policy editor and turned it on. So when I bring the laptop home now - and I want to login with the domain ID rather than the local administrator ID - it will not let me - because it wants to authenticate to the domain.

There has to be some local policy or registry setting that is telling this laptop to require Domain authentication - rather than just letting this account use the locally cached account.

 

[Grenage]

Is it possible that you activated a policy which disabled cached logons? If I recall correctly, there is an option which defines how many cached credentials are stored (default is possibly 10).

Have a look in:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

There should be a key called "cachedlogonscount", what double-check its value.

"We can categorically state that we have not released man-eating badgers into the area" - Major Mike Shearer

 

[SimonDavies]

Better still, have a look at GPMC.MSC on the server, look at all of the policies applied (by rights only the default domain policy), then look at the settings for the GPO and it will tell you all of the applied settings for that particular GPO.

Out of interest... "bring the laptop home"? if it's at home you should be able to just plug it straight into the domain and authenticate.



Simon

The real world is not about exam scores, it's about ability.