Prev: Cannot Logon Interactively error
Next: Hiding serive user IDs
From: B_Moulton05 on 17 Dec 2009 11:05
Hi,

We have an account that has been disabled on our domain controller for quite
some time, yet it still works locally on one of our lab workstations.

The user's profile has been deleted by going into My Computer >> Properties
>> Advanced, under User Profiles and deleting the account.

I also checked C:\Documents and Settings\ and the username was not there.

I checked the PC's local accounts by right-clicking My Computer >> Manage,
under Local Users & Groups, and the account wasn't listed.

I went as far as going into regedit to look up SpecialAccounts to see if it
was a hidden account, and it wasn't.

Somehow, however, the account is still working on this computer, whether the
PC is connected to the network or not (even with the network cable unplugged).

How is this possible?
From: B_Moulton05 on 17 Dec 2009 11:20
Just an update ... the account does *not* work while the network cable is
plugged in. It DOES work if there is no network connection, however, so
clearly something is being cached. I can't find out where the cached
information is for the life of me.

If I tried logging in while connected to the network, it properly displays
the message that the account has been disabled. The instant I unplug the
cable and try again, it lets me right in.

"B_Moulton05" wrote:

> Hi,
>
> We have an account that has been disabled on our domain controller for quite
> some time, yet it still works locally on one of our lab workstations.
>
> The user's profile has been deleted by going into My Computer >> Properties
> >> Advanced, under User Profiles and deleting the account.
>
> I also checked C:\Documents and Settings\ and the username was not there.
>
> I checked the PC's local accounts by right-clicking My Computer >> Manage,
> under Local Users & Groups, and the account wasn't listed.
>
> I went as far as going into regedit to look up SpecialAccounts to see if it
> was a hidden account, and it wasn't.
>
> Somehow, however, the account is still working on this computer, whether the
> PC is connected to the network or not (even with the network cable unplugged).
>
> How is this possible?
From: Fuzzy Logic on 17 Dec 2009 17:30
=?Utf-8?B?Ql9Nb3VsdG9uMDU=?= <B_Moulton05(a)discussions.microsoft.com> wrote
in news:35F8C145-B8A0-49D1-B3DC-4F989E7FB7D6(a)microsoft.com:

> Hi,
>
> We have an account that has been disabled on our domain controller for
> quite some time, yet it still works locally on one of our lab
> workstations.
>
> The user's profile has been deleted by going into My Computer >>
> Properties
>>> Advanced, under User Profiles and deleting the account.
>
> I also checked C:\Documents and Settings\ and the username was not
> there.
>
> I checked the PC's local accounts by right-clicking My Computer >>
> Manage, under Local Users & Groups, and the account wasn't listed.
>
> I went as far as going into regedit to look up SpecialAccounts to see if
> it was a hidden account, and it wasn't.
>
> Somehow, however, the account is still working on this computer, whether
> the PC is connected to the network or not (even with the network cable
> unplugged).
>
> How is this possible?

Cached credentials. Here is a tool to clear them:

http://support.microsoft.com/kb/823731
 | 
Pages: 1
Prev: Cannot Logon Interactively error
Next: Hiding serive user IDs