If you have logged on to a Windows machine as a domain user at least once, you can logon to that machine again even if the machine no longer has a network connection.
How does this work? I assume Windows caches the password somewhere and then authenticates the user. If this is the case, does anyone know where its cached?
Isnt this insecure? Assuming the domain admin forced a password change or removed a user, this 'loophole' will still allow the user to logon to the machine.