Disable Logon to Windows Computers When Not Connected to a Domain

The default behavior in Windows when connecting to a domain is to cache the domain credentials locally so that they can be used to login even when the domain isn’t available. You can set this value to 0 in order to disable logons to the computer while not connected to the domain.
Note that this will only work for computers that are configured to login to a domain, not for Home editions.

Disable Cached Logons

Open up regedit.exe through the start menu search or run box, and then navigate down to the following key:

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogon

On the right-hand pane you’ll see a key called cachedlogonscount, which you can change to 0 in order to disable logging in when not connected to the domain.
Important Note: The previous article titled "Increase the Cached Logon Count" was incorrect, this is an updated version.

The default behavior in Windows when connecting to a domain is to cache the domain credentials locally so that they can be used to login even when the domain isn't available. You can set this value to 0 in order to disable logons to the computer while not connected to the domain.
Note that this will only work for computers that are configured to login to a domain, not for Home editions.

Disable Cached Logons

Open up regedit.exe through the start menu search or run box, and then navigate down to the following key:

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogon

On the right-hand pane you'll see a key called cachedlogonscount, which you can change to 0 in order to disable logging in when not connected to the domain.
This should work on either Vista or XP.

The purpose of these checklists is to give instructions for configuring a baseline level of security on Windows XP computers. This guide does not provide a complete list of all security features provided in Windows XP or how to use them. A complete list of new security features available in Windows XP is available on the Microsoft Web site.

These checklists contain information about editing the registry. Before you edit the registry, make sure you understand how to restore it if a problem occurs. For information about how to do this, see online Help for Registry Editor.
On This Page