Subscribe to How-To Geek

Recommended: Click Here to Run a Free Scan for Common PC Errors   [Sponsored Link]

Disable Logon to Windows Computers When Not Connected to a Domain

The default behavior in Windows when connecting to a domain is to cache the domain credentials locally so that they can be used to login even when the domain isn't available. You can set this value to 0 in order to disable logons to the computer while not connected to the domain.

Note that this will only work for computers that are configured to login to a domain, not for Home editions.

Disable Cached Logons

Open up regedit.exe through the start menu search or run box, and then navigate down to the following key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

image5

On the right-hand pane you'll see a key called cachedlogonscount, which you can change to 0 in order to disable logging in when not connected to the domain.

This should work on either Vista or XP.

The Geek is the founder of How-To Geek and a geek enthusiast. When he's not coming up with great how-to articles, he's probably writing at his personal blog. This article was written on 01/12/08 and tagged with: Windows Vista, System Administration

Comments (3)

  1. Peter

    I am getting the same error on my xp, its a used laptop from my former employer.

    I can't get past the logon screen to change the registry, how can I fix this problem

    Thanks in advance

  2. Josh

    Try flashing the registry from a USB stick. Thats dodgy though. It would be better to ask the previous jobs' IT department to login, so the registry can be changed.

  3. Josh

    Plus, you could try and boot into safe mode on start up. It has limited options, but you can change the registry.


Leave a Comment




Leave your friendly comment here. If you have a computer help question, leave it on the forums instead.

Note: Your comment may not show up immediately on the site.

Copyright © 2006-2008 HowToGeek.com. All Rights Reserved.