I need to delete or lock out a single cached domain account on a local pc. If I disable the cached logon domain information I will lockout me from the pc if I am not in the office. Is there a way to disable a single cached user? Even by deleting the cache for the single user or locking the login for the user. I hope someone can suggest me something? Or the only way is to be in the office joined to network and the domain, and to disable the logon cache and eventually re-enable it. Best regards!
Asked
Active
Viewed 287 times
0
-
Delete the user profile you want to remove. – yagmoth555 Dec 06 '22 at 13:30
-
I deleted the user folder, but after the reboot I could still login. – solonely Dec 06 '22 at 13:38
-
Is there anything to do, to fully remove the user profile (except deleting the folder)? – solonely Dec 06 '22 at 13:39
-
1Use regedit, HKLM\Software\Microsoft\Windows NT\CurrentVersion\ProfileList, and find the profile of the user you removed the folder, and delete that registry too. – yagmoth555 Dec 06 '22 at 14:04
-
1NExt time when you remove a user use the gui, it remove the folder AND the registry path – yagmoth555 Dec 06 '22 at 14:05
1 Answers
2
Cached credentials are stored in the following location in the registry: HKLM\Security\Cache
There isn't a good or reliable method to manage individual cached credentials.
Greg Askew
- 35,880
- 5
- 54
- 82