How to prevent users to logon Windows domain if they don't have a network connection

[rs_sis]

Hi,

How can i prevent users to logon Windows domain
if they don't have a network connection? (30+ users)

GPO? if yes, how....?

Thanks in advance !

[m23perrault]

if they are not connected they will use cached credentials and will not actually authenticate to the domain

[rs_sis]

if they are not connected they will use cached credentials and will not actually authenticate to the domain

yes, i know.. since we are using roaming profles
XP will try to make a local copy of the profile, and that's
what i don't want ... i just want to prevent users to logon
the domain if they are not connected..

thanks for the reply !

[rs_sis]

Hi,

You might be interested in the answer with the solution of the problem above...

Via GPO you can set the numbers of logons to cache.
Computer Configuration | Windows Settings |
Local Policies | Security Options | Interactive logon " Number of previous logons to cache (in case domain controller is not available"

The computer will get this message :
The system cannot log you on now because the domain <DOMAIN_NAME> is not available.

In this policy setting, a value of 0 disables logon caching.
Any value above 50 only caches 50 logon attempts.
Default: 10