Limit the number of previous logons to cache. We are setting this value to “1” so that if a user takes their laptop home they will still be able to logon to it even if the domain is not available. This will limit the number of credentials that are cached and therefor vulnerable to attack
GPO
Computer Configuration
Policies
Windows Settings
Security Settings
Local Policies/Security Options
Interactive Logon
Interactive logon: Number of previous logons to cache (in case domain controller is not available)