Limit the number of previous logons to cache. We are setting this value to “1” so that if a user takes their laptop home they will still be able to logon to it even if the domain is not available. This will limit the number of credentials that are cached and therefor vulnerable to attack

GPO

Computer Configuration
  Policies
    Windows Settings
      Security Settings
        Local Policies/Security Options
          Interactive Logon
Interactive logon: Number of previous logons to cache (in case domain controller is not available)