Windows Vista on Dell Laptop

I have a general issue. Our network use kerberos for authentication. The
laptops are joined to our local domain. The users authenticated against our
kerberos server.

In previous windows xp and 2000, after a user log on to the computer, he did
not have to be on the network to logon to the computers.

Now, with windows vista, if the laptop does not see the domain, when on the
road or traveling, the users keeps getting an error user authentication
failed.

Any ideas why?

Doesn't "if the laptop does not see the domain...." answer your question?

"PSU" <> wrote in message
news:5F0B2D8E-35B8-4A43-B0EE-...
>I have a general issue. Our network use kerberos for authentication. The
> laptops are joined to our local domain. The users authenticated against
> our
> kerberos server.
>
> In previous windows xp and 2000, after a user log on to the computer, he
> did
> not have to be on the network to logon to the computers.
>
> Now, with windows vista, if the laptop does not see the domain, when on
> the
> road or traveling, the users keeps getting an error user authentication
> failed.
>
> Any ideas why?

well, if the laptop is on the road, why does it need to see the domain?

The lapto only needs to see the domain when it is on the network. The user
should be allow to use the logon to the laptop without seing a domain.

Help!!!!

"AJR" wrote:

> Doesn't "if the laptop does not see the domain...." answer your question?
>
> "PSU" <> wrote in message
> news:5F0B2D8E-35B8-4A43-B0EE-...
> >I have a general issue. Our network use kerberos for authentication. The
> > laptops are joined to our local domain. The users authenticated against
> > our
> > kerberos server.
> >
> > In previous windows xp and 2000, after a user log on to the computer, he
> > did
> > not have to be on the network to logon to the computers.
> >
> > Now, with windows vista, if the laptop does not see the domain, when on
> > the
> > road or traveling, the users keeps getting an error user authentication
> > failed.
> >
> > Any ideas why?
>
>
>

They should be able to log on using cached credentials when the domain is
not reachable unless a policy preventing cached credentials is in use.

J

"AJR" <> wrote in message
news:...
> Doesn't "if the laptop does not see the domain...." answer your question?
>
> "PSU" <> wrote in message
> news:5F0B2D8E-35B8-4A43-B0EE-...
>>I have a general issue. Our network use kerberos for authentication. The
>> laptops are joined to our local domain. The users authenticated against
>> our
>> kerberos server.
>>
>> In previous windows xp and 2000, after a user log on to the computer, he
>> did
>> not have to be on the network to logon to the computers.
>>
>> Now, with windows vista, if the laptop does not see the domain, when on
>> the
>> road or traveling, the users keeps getting an error user authentication
>> failed.
>>
>> Any ideas why?
>
>

Joe,
Your comment makes perfect sense. I'd like to know which policies is making
to do this. I never seen this before.

"Joe Guidera" wrote:

> They should be able to log on using cached credentials when the domain is
> not reachable unless a policy preventing cached credentials is in use.
>
> J
>
> "AJR" <> wrote in message
> news:...
> > Doesn't "if the laptop does not see the domain...." answer your question?
> >
> > "PSU" <> wrote in message
> > news:5F0B2D8E-35B8-4A43-B0EE-...
> >>I have a general issue. Our network use kerberos for authentication. The
> >> laptops are joined to our local domain. The users authenticated against
> >> our
> >> kerberos server.
> >>
> >> In previous windows xp and 2000, after a user log on to the computer, he
> >> did
> >> not have to be on the network to logon to the computers.
> >>
> >> Now, with windows vista, if the laptop does not see the domain, when on
> >> the
> >> road or traveling, the users keeps getting an error user authentication
> >> failed.
> >>
> >> Any ideas why?
> >
> >

Check out
http://www.microsoft.com/technet/win..._settings.mspx

In particular:
The settings for "Interactive Logon"

Number of previous logons to cache - if it's set to 0 (e.g. a machine in a
SSLF configuration) you can't logon unless connected to the domain.

Require domain controller authentication to unlock workstation - if enabled
and you can't get to the domain you're toast...

Best of luck,
J



"PSU" <> wrote in message
news:825718B7-7478-44B5-AC1D-...
> Joe,
> Your comment makes perfect sense. I'd like to know which policies is
> making
> to do this. I never seen this before.
>
> "Joe Guidera" wrote:
>
>> They should be able to log on using cached credentials when the domain is
>> not reachable unless a policy preventing cached credentials is in use.
>>
>> J
>>
>> "AJR" <> wrote in message
>> news:...
>> > Doesn't "if the laptop does not see the domain...." answer your
>> > question?
>> >
>> > "PSU" <> wrote in message
>> > news:5F0B2D8E-35B8-4A43-B0EE-...
>> >>I have a general issue. Our network use kerberos for authentication.
>> >>The
>> >> laptops are joined to our local domain. The users authenticated
>> >> against
>> >> our
>> >> kerberos server.
>> >>
>> >> In previous windows xp and 2000, after a user log on to the computer,
>> >> he
>> >> did
>> >> not have to be on the network to logon to the computers.
>> >>
>> >> Now, with windows vista, if the laptop does not see the domain, when
>> >> on
>> >> the
>> >> road or traveling, the users keeps getting an error user
>> >> authentication
>> >> failed.
>> >>
>> >> Any ideas why?
>> >
>> >