I'm not given a warning if logged on using cached credentials in Windows 2000.

A. In Windows NT 4.0 if you log on and no domain controller can be found you are logged on using cached information (assuming you have previously logged onto the machine). You are given a warning "A domain controller could not be contacted and you have been logged on using cached information".

This warning is disabled by default in Windows 2000 but can be enabled by performing the following on each computer:

1. Start the registry editor (Regedit.exe)
2. Move to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
3. From the Edit menu select New - String Value
4. Enter a name of ReportControllerMissing and press Enter
5. Double click the new value and set to TRUE (must be uppercase). Click OK

Now for each user who you wish to have controller missing message displayed perform the following:

1. Start the registry editor (Regedit.exe)
2. Move to HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
3. From the Edit menu select New - DWORD Value
4. Enter a name of ReportDC and press Enter
5. Double click the new value and set to 1. Click OK

You may want to automate this via a logon script or via a policy template.

This warning was probably removed by default as most users would not understand the warning and just ignored it so be selective about re-enabling.

---