Hi,We know the concept of Cached Credentials of a windows domain user. In case the user is not connected to the domain controller, the user gets authenticated locally (on the machine) using the cached credentials.I was wondering if there is any kind of setting to expire the cached credentials used. For example, if the user's credentials are cached for more than 30 days and user has not connected for a single instance to the active directory in this period, the credentials get invalidated. And it mandates the user to connect to AD at least once to continue using the machine and credentials cache expiry is extended for next 30 days.Just a thought, I am not sure if this already exists or not.Many Thanks. Dharmesh M Mehta http://smartsecurity.blogspot.com

Hi, As far as I know, the cached credentials will not expire (but it can be overwritten), and we cannot set an expire date for them. For your reference, here is an article related to cached credentials security: Cached credentials security in Windows Server 2003, in Windows XP, and in Windows 2000 http://support.microsoft.com/kb/913485 Hope it is helpful.

Hello, Just wanted to know if you still can confirm that cached windows credentials do not expire and the user is able to login as long as he want. We work with Windows XP SP3 and Windows Server 2003 R2 and need to know this detail, it is vital for our business right know. Thank you for your support Best regards, bigthelip

On Thu, 21 Apr 2011 08:48:37 +0000, bigthelip wrote: Just wanted to know if you still can confirm that cached windows credentials do not expire and the user is able to login as long as he want. Cached credentials never expire. Period. Paul Adare MVP - Identity Lifecycle Manager http://www.identit.ca What this country needs is a good five-cent microcomputer.

Thank you! Greets