5

I was once asked this question which I could not find an answer to.

This is the scenario.

The primary Domain Controller is at Head Office. Remote office is connected to primary DC via internet link provided by third party. All desktop PCs at remote office is set to wipe credential caching when they boot. Local account login is disabled. There is no BDC/RODC at remote office.

If the next morning internet link goes down (at remote office) before people had a chance to turn on their PCs, what are the possible solutions to let people login to their desktops

Thanks Emon

  • 3
    If the next morning internet link goes down (at remote office) before people had a chance to turn on their PCs, what are the possible solutions to let people login to their desktops - None. – joeqwerty May 15 '18 at 11:22
  • 1
    Local admin accounts disabled from login too? So... in case your DC is gone for good, you couldn't even rejoin them to a newly built DC without using a drastic password recovery tool? – rackandboneman May 15 '18 at 19:02
11

According to your specs:

All desktop PCs at remote office is set to wipe credential caching when they boot. Local account login is disabled.

There is no way, and that's the point. The only way would be to use some software to enable a local login on the desktops itself, but what's the point if the workstation probably won't have Internet, DNS or fileserver access?

|improve this answer|||||
  • Yep. Either leave that turned on, or get a DC at the remote office. – Joel Coel May 15 '18 at 13:57
  • If they work with a remote DC, there is likely internet access all right - the question is whether unpoliced internet access is desirable/tolerable here. – rackandboneman May 15 '18 at 19:00
  • @rackandboneman yes, but the question states that the issue is when they lose internet access, that's why the remote DC is down (of course it could be down for other reasons, but the question is specific about the internet link going down being the cause). – Leo May 17 '18 at 22:57
2

What is missing from the question is the business continuity plan. Which network connected applications are essential for business operations? How long of a downtime can be tolerated?

Users don't have AD auth, so they do not have desktops at all. Either get them in via a local user or fix the WAN.

And consider adding additional connectivity from a different provider. Cell data, or Internet connections of any kind.

|improve this answer|||||

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.