Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When a domain user successfully logs on to a domain-joined computer, the user's domain credentials are cached so that the user can logon again if the domain controller is unavailable (eg the computer is disconnected from the network).

If the domain-joined computer is running a Windows service as a domain service account and the computer restarts, will the service start if there is no domain controller available?

Secondly, if the afore mentioned service attempts to authenticate to and communinicate with a second local service, will it succeed?

share|improve this question

I'm 90% certain that cached credentials apply only to interactive logins.

share|improve this answer
My experience as well, like MSSQL or Exchange services in domain user context not starting if there're no DCs around at all on bootup... though YMMV – Oskar Duveborn Aug 23 '10 at 19:31
I'm 99.9% certain it's interactive logins only. – Chris S Aug 23 '10 at 19:52
@Oskar: all Exchange services usually run as LocalSystem, LocalService or NetworkService; they don't start if there's no DC around because Exchange relies quite heavily on Active Directory, not due to authentication failures. Just wanted to point this out :-) – Massimo Aug 23 '10 at 19:56
Yeah I was gonna remove the Exchange mentioning from the comment and then forgot... ^^ – Oskar Duveborn Aug 24 '10 at 7:17

It is for interactive logons only. See the MS KB.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.