I DONT want user to be able to log into local machine with cached info

[gutwrencher]

If a user disconnects his ethernet cable and attempts to log in, of course they get the 'no domain controller can be contacted, you are being logged in with cached account info'. Which then lets them log in without policy restrictions. Is there a way to prevent them from logging in at all unless they contact a domain controller? This is a security issue here I need to overcome.

Thanks all!
GW

 

[wolluf]

Do cached details really have no policy restrictions? As policy restrictions are actioned by registry settings - don't cached details just use the last version of the user's registry stored locally (ie, with policies in place)?

What actual problems are you having with users logging on with cached details?

 

[gutwrencher]

Well the policy I employ for these particular individuals is pretty strict. Just about every option is checked. When they used cached info, icons of applicatins that are installed that they could not previously use are now visible and the icons to applications I need them to use are gone (since they reside on the server). This is also a mandatory profile. Thanks for any help!

GW