Hi all, Here at work we have few laptops that are using cached credentials from a NT domain that is unavailable. These computers are mainly used by outside contractors. Now, since a week or two we had two computers fail the logon process because of expired credentials. We have no way of fixing that (because the domain is not ours, and there is no trust set up, and also never will be) but we would like to foresee these logon failures. Does anyone know how to check the time and date of the last, most recent successful logon? I mean, we need to verify the last time the workstation has 'seen' the DC, the last time the credentails were verified by that DC and cached? So that we know when to expect the cache to expire and warn the user/his IT dept. Any suggestions are welcome. Grtz Lukas EDIT: detail; the workstations run Windows XP professional SP2.