Monat: Oktober 2015

Eventviewer shows a Warning, LSA (LsaSrv) „Logon Cache“

Issue:
Logon cache was disabled. Intermittent authentication failures may result during periods of network latency or interrupts. Please contact your system administrator.

Cause:
This error will occur if the policy „Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Interactive logon: Number of previous logons to cache (in case domain controller is not available)“ is set to ‚0‘ in either the Local Security policy or via Group Policy.
This indicates that the cached logons feature in Windows Server 2008 has been disabled, or the Windows Server 2008 number of cached logons (default of 25) was exceeded.

Solution:
To fix this do one of the following:

1. Enable the Windows Server 2008 cached logons.
2. Increase the Windows Server 2008 number of cached logons from the default of 25

Cached logon information is controlled by the following key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\Current Version\Winlogon\
ValueName: CachedLogonsCount