AddSystemHard.Policies.AddSystemHard• Machine
Domain credential caching hardening
Download ADMXEnabling this policy modifies two settings related to how the local system handles domain-related credentials: - Reduce the caching count (2 cached credentials) of domain-related credentials for offline authentication if no domain controller is available - The delay before the credentials are cleared from memory after a logoff is reduced to 30 seconds. These settings reduce the exposure time of credentials to attack tools such as Mimikatz. NOTE: These settings can prevent a new session opening if the network is not available or if a domain controller is not reachable.
Policy Details
- Policy Name
- Logon
- Registry Key
- SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
- Supported On
- At least Windows Vista
Supported Values
Simple Enabled/Disabled toggle controlling whether the value exists under the configured registry key.