Connect to the domain caching / how to enable account lockout

We have portable computers that normally connects to the AD domain, but must also be able to allow users to log on to the computer when the domain is unavailable for authentication.

My question is, I want to harden the laptops against the brute force of connection where the laptop was stolen.  Even if we have a policy at the domain level that locks an account after three invalid login attempts, I'm not finding a way to do it with the credentials cached when the computer is not on the field.

Limiting the number of connections cached does not address this particular situation that I could find - the computer always allows an unlimited number of erroneous assumptions in the password, and after entering the password, the account is connected.

It is Windows 7 Professional.

Any suggestion would be appreciated.  Thank you.

This issue is beyond the scope of this site (for consumers) and to be sure, you get the best (and fastest) reply, we have to ask either on Technet (for IT Pro) or MSDN (for developers)
*

Tags: Windows

Similar Questions

Maybe you are looking for