How to prevent users from bypassing the logon script (4276690)

In an attempt to bypass the execution of the Desktop Authority login script, or any configuration applied during the logon process, users may unplug the network cable from the client machine before logon.  The computer can still be used because cached credentials are enabled by default.  The number of cached logon attempts is set to 10 by default.

To resolve this issue, disable the ability to cache user credentials on the local machine by applying the following registry setting using Desktop Authority or a GPO:   

Hive:  HKEY_LOCAL_MACHINE
Key:  Software\Microsoft\Windows NT\CurrentVersion\Winlogon
Name:  CachedLogonsCount
Type:  REG_SZ
Value:  0

Note:  As a result of this setting, users will not be able to logon to the machine unless the network is available.  Therefore, it is strongly recommended to exclude portable class machines from receiving this setting using Validation Logic. Should you need to put this value back to its original value, the default value is 10.