domain cache credential corrupted

domain cache credential corrupted

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
domain cache credential corrupted Terence 01-15-2007
Posted by =?Utf-8?B?VGVyZW5jZQ==?= on January 15, 2007, 9:38 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I noticed a problem with cache credential on winXP / win2k3. When you login
using a domain account on a workstation or member server, and you lock the
worktation. Next, you unplug the network cable and force logoff using a local
administrator account. Then you login try to login using the domain account
again, and you will noticed that your domain password does not work anymore.

Anyone has encountered this problem and found out the root cause?

Appreciate any help.



Posted by Lanwench [MVP - Exchange] on January 15, 2007, 11:14 am
If you were  Registered and logged in, you could reply and use other advanced thread options
> I noticed a problem with cache credential on winXP / win2k3. When you
> login using a domain account on a workstation or member server, and
> you lock the worktation. Next, you unplug the network cable and force
> logoff using a local administrator account. Then you login try to
> login using the domain account again, and you will noticed that your
> domain password does not work anymore.
>
> Anyone has encountered this problem and found out the root cause?
>
> Appreciate any help.

If you haven't successfully logged in & out of the workstation with that
domain account at least once, there are no cached credentials to use Try
that....then try
logging in without the network cable plugged in.

Check for event log errors if this doesn't work - and I suggest downloading
& installing the User Profile Hive cleanup service from MS on all your
workstations.

Note that this isn't the best group for your question (this group is for
security issues) - next time you might try m.p.windowsxp.network_web or a
server/AD networking group.



Posted by Roger Abell [MVP] on January 15, 2007, 11:49 am
If you were  Registered and logged in, you could reply and use other advanced thread options
>I noticed a problem with cache credential on winXP / win2k3. When you login
> using a domain account on a workstation or member server, and you lock the
> worktation. Next, you unplug the network cable and force logoff using a
> local
> administrator account. Then you login try to login using the domain
> account

since you did not mention plugging the network back in, I assume
this login is without network and so should trigger use of cached
credentials

> again, and you will noticed that your domain password does not work
> anymore.
>
> Anyone has encountered this problem and found out the root cause?
>

You did not mention what setting is the effective policy on the
test machine for the number of cached logins. Could this perhaps
be set down to zero ?



Posted by Ray on January 16, 2007, 11:30 am
If you were  Registered and logged in, you could reply and use other advanced thread options
And if you change your domain password but do not do a real logoff from the
domain, the cached credentials do not get updated.

It's working as it's designed.

Ray

>I noticed a problem with cache credential on winXP / win2k3. When you login
> using a domain account on a workstation or member server, and you lock the
> worktation. Next, you unplug the network cable and force logoff using a
> local
> administrator account. Then you login try to login using the domain
> account
> again, and you will noticed that your domain password does not work
> anymore.
>
> Anyone has encountered this problem and found out the root cause?
>
> Appreciate any help.
>
>



Similar ThreadsPosted
3rd party CA's CRL cache in domain controller? October 30, 2007, 10:01 am
Re: corrupted profiles and much more May 31, 2008, 6:48 pm
IE's SSL keystore cache July 27, 2006, 10:12 pm
delete LSA cache password ? April 18, 2007, 7:15 am
Credential expiration timestamps and groups January 10, 2007, 10:59 am
Tasklist.exe -- credential caching for remote workstations? January 19, 2006, 6:47 pm
Credential Roaming + EFS - how to cleanup user certificates ? May 5, 2008, 2:49 pm
Terminal server security issue with screen cache? December 19, 2005, 12:20 pm
KerberosToken constructor gives error - Kerberos credential handle could not be returned June 4, 2007, 2:01 am
Certificates, Autoenrollment, Credential Roaming and User's Personal Store April 29, 2008, 10:53 am

The site map in XML format XML site map

Contact Us | Privacy Policy