Maintain access to network(shared folders) resources if the site loses access to a Domain Controller?

scenario

windows 7 users log on workstations @ site. domain controller , domain authentication users across wan. users accessing local(same building) shared directory on windows 2008r2 server, in order open, modify, save new files, etc.

then, site loses access domain controller due wan outage.

question

will users have logged onto windows 7 workstations continue have access shared resources on local windows 2008r2 server cached credentials(assuming don't logoff or restart machines)?? has been case in past, wondering if has changed windows 2008??

thanks

hi,

the duration can access server depends on when server requires re-authentication.

in windows implementation, smb session expiration enforced based upon client’s support of dynamic re-authentication capability [ms-smb].

if client enables cap_dynamic_reauth capability bit, server enforce session expiration. if client not set cap_dynamic_reauth, windows server not return status_network_session_expired. 

the smb dynamic re-authentication feature introduced in windows xp. there, windows-based clients set cap_dynamic_reauth capability bit indicate server client supports re-authentication when kerberos service ticket session expires.

windows servers check cap_dynamic_reauth:

• if clientcapabilities sets cap_dynamic_reauth, server set server. session.authenticationexpirationtime expiry time returned acceptsecuirtycontext.
• if clientcapabilities not set cap_dynamic_reauth, server not set server. session.authenticationexpirationtime, cap_dynamic_reauth capability bit not set client means session not expire on server side.

to configure maximum lifetime service ticket, can use grouppolicy. default value of maximum lifetime service ticket in default domain policy 600 minutes.

note:this setting applied dc, not clients.

for detailed information, please view link below

cifs , smb timeouts in windows

http://blogs.msdn.com/b/openspecification/archive/2013/03/19/cifs-and-smb-timeouts-in-windows.aspx

maximum lifetime service ticket

http://technet.microsoft.com/en-us/library/jj852188.aspx

hope helps.

---

---

steven lee

technet community support

Windows Server  >  Network Infrastructure Servers