Ce site est optimisé pour être consulté depuis un navigateur moderne dans lequel JavaScript est activé.

Pourquoi puis-je me connecter à une machine même si le contrôleur de domaine AD est hors service ?

ayi · 2025-12-14 00:33:27

Scenario: - While mon DC is running, I log into an arbitrary machine. - I arrêtez le DC - I log off le arbitrary machine. Let's bounce it for good measure, too. - When le machine comes back up, I can…

ayi

Scenario:

While mon DC is running, I log into an arbitrary machine.
I arrêtez le DC
I log off le arbitrary machine. Let's bounce it for good measure, too.
When le machine comes back up, I can encore login avec mon domain credentials even bien que DC is down

Why et how?

Is there certains sort of local credential cache in play on le "arbitrary" machine? My password was somehow hashed et stored for le future in CASE le DC blows up ou is down?

Would le même process work si I attempted to login to a box that I had jamais logged into avant tandis que le DC is down?

ayi

Par défaut, Windows will cache the last 10-25 users to log into a machine (depending on OS version). This behavior is configurable via GPO et is commonly turned off completely in instances où security is critical.

If you tried to log into a workstation ou member server that you had jamais logged into tandis que tous of votre DCs are unreachable, you would get an error stating There are currently no logon servers available to service the logon request