no access after ...

[GCBN]

Hello,

I have a windows 2003 server, clients are winxp sp2
All pc's are configured to logon on my domain.
Some of the users work a lot via VPN and come not often in the office.
Sometimes they work on other locations for several months.
After some time ( don't now exactly how long) they cannot not more
logon ( with (mydomain\username) on there workstation when they are not
connecetd to the domain.

Is there somewhere a setting that can prevent this block?

Thank you,

 

[Greg O]

"GCBN" <gc154460@belgacom.net> wrote in message
news:%23v%238gYezHHA.1208@TK2MSFTNGP03.phx.gbl...
> Hello,
>
> I have a windows 2003 server, clients are winxp sp2
> All pc's are configured to logon on my domain.
> Some of the users work a lot via VPN and come not often in the office.
> Sometimes they work on other locations for several months.
> After some time ( don't now exactly how long) they cannot not more
> logon ( with (mydomain\username) on there workstation when they are not
> connecetd to the domain.
>
> Is there somewhere a setting that can prevent this block?
>
> Thank you,
>
>
>

You can only log onto a domain a limited number of times (10 by default I
think) when not connected to a domain controller. You could increase this
number in group policy or they could log on as local administrators instead
of the domain.

 

[Brian Spolarich]

"Greg O" <none@all.com> wrote in message
news:OC1JBqezHHA.5380@TK2MSFTNGP04.phx.gbl...
> You can only log onto a domain a limited number of times (10 by default I
> think) when not connected to a domain controller. You could increase this
> number in group policy or they could log on as local administrators
> instead of the domain.

That's the first I've heard of this. Where is this policy? The only
policy setting I can fine that's even similar is:

Computer->Windows Settings->Security Settings->Local Policies->Security
Options
Interactive Logon: Number of logons to cache (in case domain controller
is not available)

-bws

 

[Greg O]

"Brian Spolarich" <briansp@gmail.com> wrote in message
news:%23kxU29gzHHA.5380@TK2MSFTNGP04.phx.gbl...
> "Greg O" <none@all.com> wrote in message
> news:OC1JBqezHHA.5380@TK2MSFTNGP04.phx.gbl...
>> You can only log onto a domain a limited number of times (10 by default I
>> think) when not connected to a domain controller. You could increase this
>> number in group policy or they could log on as local administrators
>> instead of the domain.
>
> That's the first I've heard of this. Where is this policy? The only
> policy setting I can fine that's even similar is:
>
> Computer->Windows Settings->Security Settings->Local Policies->Security
> Options
> Interactive Logon: Number of logons to cache (in case domain controller
> is not available)
>
> -bws
>

That's the one I think. I took your post to mean that people were taking
computers off the network and then after a number of logons they could no
longer do so. That in effect is the same as not being able to contact the
domain controller on a network. So if you increased this number to the
maximum that might solve the problem. The other way is to log on as a local
administrator and most of their programs should still run.