Some more testing but no success. I stopped the lsasd service, made a backup of the registry.db file and then tried manually inserting 2592000 (30 days) into the CacheEntryExpiry value. Restarted the service and ran lw-eventlog-cli -s - localhost to see there was any change. There wasn't. Event Description....... Likewise authentication service provider configuration settings have been reloaded. Authentication provider: lsa-activedirectory-provider Current settings are... Cache reaper timeout (secs): 2592000 Cache entry expiry (secs): 14400 Space replacement character: '^' Domain separator character: '\' Enable event log: false Logon membership requirements: Log network connection events: true Create K5Login file: true Create home directory: true Sign and seal LDAP traffic: false Assume default domain: true Sync system time: true Refresh user credentials: true Machine password sync lifetime: 2592000 Default Shell: /bin/bash Default home directory prefix: /home Home directory template: %H/%D/%U Umask: 18 Skeleton directory: /etc/skel Cell support: Unprovisioned Trim user membership: true NSS group members from cache only: false NSS user members from cache only: false NSS enumeration enabled: false Domain Manager check domain online (secs): 300 Domain Manager unknown domain cache timeout (secs): 3600 Then I ran sudo lw-edit-reg and see a value change "CacheEntryExpiry"=dword:32393532 lw-refresh-configuration Configuration successfully loaded from disk. lw-eventlog-cli -s - localhost ======================================== Event Record: (94/97) (94 total) ======================================== Event Record ID......... 94 Event Table Category.... System Event Type.............. Information Event Date.............. 2010-05-04 Event Time.............. 09:42:58 PM Event Source............ Likewise LSASS Event Category.......... Service Event Source ID......... 1004 Event User.............. SYSTEM Event Computer.......... sps31-728-ckr1 Event Description....... Likewise authentication service provider configuration settings have been reloaded. Authentication provider: lsa-activedirectory-provider Current settings are... Cache reaper timeout (secs): 2592000 Cache entry expiry (secs): 14400 Space replacement character: '^' Domain separator character: '\' Enable event log: false Logon membership requirements: Log network connection events: true Create K5Login file: true Create home directory: true Sign and seal LDAP traffic: false Assume default domain: true Sync system time: true Refresh user credentials: true Machine password sync lifetime: 2592000 Default Shell: /bin/bash Default home directory prefix: /home Home directory template: %H/%D/%U Umask: 18 Skeleton directory: /etc/skel Cell support: Unprovisioned Trim user membership: true NSS group members from cache only: false NSS user members from cache only: false NSS enumeration enabled: false Domain Manager check domain online (secs): 300 Domain Manager unknown domain cache timeout (secs): 3600 Event Data..............