DC authentication always require for domain PC

Question

Hi Team,
i wanted to know how to apply the computer in the domain to be unlocked only after they are connected to domain
so even if the PC is locked which is in domain and if the network cable is removed from the pc then it should not be able to login to the pc
i think this can be done via GPO but i have forgot where it can be enabled.
i want at any time the domain pc should never check the cache credential but always check one of the DC to login or unlock the domain pc
Thank you
Viraj
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Answer 1

Yes, very much possible. 
Using cached logon, here you go : https://social.technet.microsoft.com/Forums/windowsserver/en-US/6f9389ab-0f93-4837-aea7-3224ab806396/cached-logon-count-via-group-policy?forum=winserverGP
Arnav Sharma | http://arnavsharma.net/ Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading
the thread.