RE: [ActiveDir] Cached Credentials

[Mulnick, Al]

I'm thinking along the lines of authentication to get on the network, yes.  It's not a Windows function that I'm thinking of necessarily.     Al From: Marcus Oh [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 29, 2003 8:44 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Cached Credentials Hey Al,   Can you elaborate on what you mean with the "possibly an ip address if you have to authenticate the computer account (depends on your settings)" remark?  I'm curious if this is a function natively of Windows, or if you're referring to some type of authentication method like ACS or 802.1x stuff?   Thanks!   -m   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Wednesday, October 29, 2003 5:11 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Cached Credentials   Ah.  Then like I said about network resources: assuming the DC is unavailable to more than just your workstation, network resources that rely on AD authentication would be unavailable, you wouldn't get GPO's and login scripts, and possibly an ip address if you have to authenticate the computer account (depends on your settings).  Other things, such as RIS images etc would also not be published to you.  If you did get an address, you wouldn't be able to update your DNS entry if set up for secure DDNS.   I doubt that's a complete list, but it's what comes to mind.    Al   From: Santhosh Sivarajan [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 29, 2003 4:24 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Cached Credentials Yes it is.. "Anything domain related won't happen"  I am looking for more information about those "domain related" stuff.    -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Wednesday, October 29, 2003 1:45 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Cached Credentials   Anything domain related won't happen with cached credentials.  By definition, you only need to use cached credentials when you are not able to contact a domain controller. If you can't contact a domain controller, you won't be able to authenticate to other machines because most likely they won't be able to either.   Is that too simplified? :) Al   From: Santhosh Sivarajan [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 29, 2003 2:20 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Cached Credentials Hi there,   I am trying to explain to a client the difference on the network between using Cached Credentials and Domain Credentials . I know a few things about group policy updates, such as password expiration notice, when using Cached  Credentials.    What else, other than Group policy updates,   won't happen when using Cached  Credentials?     I couldn't find a good explanation or any technical documentation on this.        Can anyone  give me a good technical explanation?   Thanks, Santhosh