With Windows 7 we are seeing some issues where cached credentials with smart cards will just stop working until the computer can successfully re-authenticate against the domain. User logons with cached credentials wrok fine but smart card cached credentials will just randomly start working. All we see in event viewer is Log Name: SystemSource: LsaSrvDate: 3/27/2010 11:26:54 AMEvent ID: 45058Task Category: Logon CacheLevel: InformationKeywords: ClassicUser: N/AComputer: xxx.xxx.xxxDescription:A logon cache entry for user DC=com, DC=domaniname, OU=Accounts, OU=IT Admin Accounts, CN=username@DC=com, DC=domainname, CN=xxx@xxx.com was the oldest entry and was removed. The timestamp of this entry was 3/26/2010 16:25:45. Thanks for any insight

We're seeing the same thing, but it happens with remote users frequently that do not use smart cards. Any ideas?

I have seen this also and I'm suspect it has something to do with the CRL (Certificate Revocation List) checking. But I am new to troubleshooting windows. I have sniffed my system and never see it go to the CRL distribution site but it somehow has the CRL to validate the card at login. I'm assuming it is pushed through the domain. My guess is that the cached credential login with a smart card fails when cached CRL expires but I have no evidence that this is the cause.