Category: Windows Technologies

Windows determines how many user account entries it can save in the logon cache on the local computer via below registry key: Key: HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrent VersionWinlogon ValueName: CachedLogonsCount Data Type: REG_SZ Values: 0 – 50 The valid range of values for this parameter is 0 to 50. A value of 0 turns off logon caching and any value above 50 will only cache 50 logon attempts. By default, all versions of Windows remember 10 cached logons except Windows Server 2008. The default value of the cachedlogonscount registry entry has changed from 10 to 25 in Windows Server 2008. The minimum […]

Microsoft Windows caches previous users’ logon information locally so that they can log on if a logon server is unavailable during later logon attempts. If a domain controller is unavailable and a user’s logon information is cached, the user will be prompted with a dialog that says: A domain controller for your domain could not be contacted. You have been logged on using cached account information. Changes to your profile since you last logged on may not be available. With caching disabled, the user is prompted with this message: The system cannot log you on now because the domain <DOMAIN_NAME> […]

qwinsta –> Display information about Terminal Sessions. rwinsta  –> Reset the Terminal session Ex: rwinsta <session ID> /server:<servername> Usage Examples: Find all the terminal service sessions: C:>qwinsta /server:Test-SRV1 SESSIONNAME       USERNAME                 ID  STATE   TYPE        DEVICE console           test-admin                0  Active  wdcon rdp-tcp                                 65536  Listen  rdpwd                    temp-admin                3  Disc    rdpwd                    demo-user                 1  Disc    rdpwd C:> End the session you want, say the one in disconnected state: C:>rwinsta 1 /server:Test-SRV1 (This will end the session with ID ‘1’ that is of demo-user session running in disconnected state ) C:> Verify that the session indeed got disconnected: C:>qwinsta /server:Test-SRV1 SESSIONNAME       USERNAME                 ID  STATE   […]