Help! How to fix Windows 2000 Pro Login Security hole!!!

To edit the local machine policy follow these steps:

Start --> Run --> type "gpedit.msc" --> Local Computer Policy --> Computer Configuration --> Windows Settings --> Security Settings --> Local Policies --> Security Options --> Open: Interactive Logon: Number of previous logons to cache

Change the setting to 0 (zero) to disable the caching of logon credentials.

You can do the same thing in AD. It is the same key for AD. Remember that if your DC goes down, the users can not work/logon locally.

We disable cached credentials on all machines except laptops here at my office.

Thank alot! i was try let you know.

By the way.. Drizzle i cannot find it the ''Open: Interactive Logon:''?

there isnt "open : interactive logon"

once you under <security options > look for :

Interactive logon : Number of interactive logons to cache ( in case domain controller is not available )

the default value is set to 10 logons

change it to Zero ( Do not cache logons)