Tech Support > Microsoft Windows > Windows Server > get rid of cached domain credentials?
get rid of cached domain credentials?
Posted by Gordon J. Rattray on October 29th, 2004


Hi there,

4 days a week my main computer is hooked up with the domain controller.

During the 3 days a week that the domain controller is off, my main computer
still caches the domain controller credentials. For example, when I shutdown
the main computer, it displays the "shutdown event tracker".

In the local Group Policy the shutdown event tracker is disabled.

How can I clear out the cached domain credentials without having to
"dis-join" the main computer from the domain?

Thanks,

Gordon


Posted by Chriss3 [MVP] on October 30th, 2004


Hello Gordon
You found related GPO Settings to cache below:
http://www.chrisse.se/Search_gpo.asp...=Cache&RSOP=UI

--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup
------------------------------------------------
http://www.chrisse.se - Active Directory Tips

"Gordon J. Rattray" <gordscorp@shaw.ca> skrev i meddelandet
news:ew5%23U8gvEHA.1564@TK2MSFTNGP09.phx.gbl...


Posted by Steven L Umbach on October 30th, 2004


As long as your computer is a member of the domain, computer configuration
policy will always apply to it and user configuration will always apply to
you when you logon to the domain either live or with cached credentials. The
"shutdown event tracker" is part of computer configuration. I do NOT
recommend that you remove the computer from the domain as you may not be
able to logon unless you know and name/password for a local user account and
if you remove a computer from the domain while it is not connected the
domain, your domain Group Policy settings may not be "unapplied" correctly
anyhow. --- Steve


"Gordon J. Rattray" <gordscorp@shaw.ca> wrote in message
news:ew5%23U8gvEHA.1564@TK2MSFTNGP09.phx.gbl...


Posted by Gordon J. Rattray on October 30th, 2004


Hi Steve,

I do agree that the "shutdown event tracker" is configured locally on the
computer and mine is DISABLED....

It still comes up, though, and that's what has me wondering......

Any ideas?

Gordon

"Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
news:%23NRRBZivEHA.1164@TK2MSFTNGP10.phx.gbl...


Posted by Steven L Umbach on October 30th, 2004


It probably is configured to be enabled in domain Group Policy. Domain
policy will always override any local Group Policy for the same defined
setting. The domain policy will still apply to the domain computer even
though it is not connected to the domain and there is no way to
override/clear that at the local computer level. --- Steve


"Gordon J. Rattray" <gordscorp@shaw.ca> wrote in message
news:ukc%23CKpvEHA.3080@TK2MSFTNGP12.phx.gbl...



Similar Posts