Disabling Credential Caching with Offline Access

To disable credential caching using a Group Policy Object (GPO) setting, enable Interactive logon: number of previous logons to cache (in case domain controller is not available).

For offline access, RapidIdentity recommends modifying the value for CachedLogonsCount in the following registry key:

• Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\

• Value name: CachedLogonsCount

• Data type: REG_SZ

• Expected values (turn on logon cache): 1–50

• Value to turn off logon cache: 0

• Default value: 10

Any changes you make to this key require that you restart the computer for the changes to take effect. Windows provides a valid range of values for domain user password cache from 0 to 50.

A value of 0 turns off caching and any value above 50 will only cache 50 logon attempts. By default, all versions of Windows remember 10 cached logon attempts except Windows Server 2008. For more information about cache logon count registry data, see Cached domain logon information - Windows Server (Microsoft).