ADMX Viewer
AddSystemHard.Policies.AddSystemHard• Machine

Domain credential caching hardening

Download ADMX

Enabling this policy modifies two settings related to how the local system handles domain-related credentials: - Reduce the caching count (2 cached credentials) of domain-related credentials for offline authentication if no domain controller is available - The delay before the credentials are cleared from memory after a logoff is reduced to 30 seconds. These settings reduce the exposure time of credentials to attack tools such as Mimikatz. NOTE: These settings can prevent a new session opening if the network is not available or if a domain controller is not reachable.

Policy Details

Policy Name
Logon
Registry Key
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Supported On
At least Windows Vista
Available Languages
en-usfr-fr

Supported Values

Simple Enabled/Disabled toggle controlling whether the value exists under the configured registry key.