On one laptop we are seeing that cached credential don't work. We have DirectAccess set up so wherever they have an internet connection they should be able to log on, however, when this person doesn't have an internet connection because they're on the train or otherwise away from a fixed location they are offline. When they try to log on the see:
We can’t sign you with this credential because your domain isn’t available. Make sure your device is connected to your organization’s network and try again. If you previously signed in on this device with another credential, you can sign in with that credential.
I've checked Secpol.msc on this computer to confirm that the setting to allow cached credentials is set to the default. "Interactive logon: Number of previous logons to cache (in case domain controller is not available)" is set to 10.
She was logged onto the computer. She locked her computer and disconnected wifi and then tried to logon and it's not working. Is there somewhere else to look?