Cached Credentials

Limit the number of previous logons to cache. We are setting this value to “1” so that if a user takes their laptop home they will still be able to logon to it even if the domain is not available. This will limit the number of credentials that are cached and therefor vulnerable to attack

GPO

Computer Configuration

 Policies

   Windows Settings

     Security Settings

       Local Policies/Security Options

         Interactive Logon

Interactive logon: Number of previous logons to cache (in case domain controller is not available)