What you say makes sense, and I can see that it is a security issue, how come it would allow me to use a cached profile while I was not connected to the domain before. Then I was not able to negotiate with the domain controller either. It just used a cached profile and warned me that the changes I made would not be saved, as it could not connect to the domain. It would then let me use my cached profile though. Now it will not let me access that profile again.
Does the machine account stay validated as long as nothing is changed with regard to the domain settings, or does it have to be validated at every logon? If it has to be validated every time, then how do cached profiles work? Like I said, I dont really have a good enough knowledge of this stuff, and a little knowledge proved to be a very dangerous thing
Thanks for the help.