Gentlemen,

can you help me with information how to prevent users login locally to
workstation joinned into domain when domain controller is
unavailable?

When this happened Windows XP workstation said with dialog box famous
message:

"Windows cannot locate the server copy of your roaming profile and is
attempting to log you on with your local profile. Changes to the
profile will not be copied to the server when you logoff. Possible
causes of this error include network problems or insufficient security
rights. If this problem persists, contact your network administrator.
"

an user after 30 second logged to computer locally. But I want that
users do not log at all with error about incorrect login/password. Is
it possible?

Thank you.

Found solution:

Set "Local Security Settings -> Interactive logon: Number of previous
logons to cache (in case domain controller is not available)" to 0

Or in registry:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion
\Winlogon]
"CachedLogonsCount"="0"

Found solution:

Set "Local Security Settings -> Interactive logon: Number of previous
logons to cache (in case domain controller is not available)" to 0

Or in registry:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion
\Winlogon]
"CachedLogonsCount"="0"

Found solution:

Set "Local Security Settings -> Interactive logon: Number of previous
logons to cache (in case domain controller is not available)" to 0

Or in registry:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion
\Winlogon]
"CachedLogonsCount"="0"