Detections
Analytics

2.3.7.5 Ensure 'Interactive logon: Number of previous logons to cache (if domain controller is not available)' is set to '4 or fewer'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting determines whether a user can log on to a Windows domain using cached account information.

Solution

Make sure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to 4 or fewer logons.

See Also

https://workbench.cisecurity.org/files/1941

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(13), CSCv6|16

Plugin: Windows

Control ID: 39df93d3aa673a30f70e40d4b0c908c33e2fafb59da1e5281ea59e06eae0eb07