RE: Modifying default behaviour of MS VPN client

From: Paul Aviles (paviles_at_adjoined.com)
Date: 12/08/04

  • Next message: marco2: "RE: Modifying default behaviour of MS VPN client" 
    Date: Wed, 8 Dec 2004 12:06:54 -0500
To: "Wozny, Scott (US - New York)" <swozny@deloitte.com>, <focus-ms@securityfocus.com>

    Learned something new.. Did not know that. Good security, go MS!

    -----Original Message-----
    From: Wozny, Scott (US - New York) [mailto:swozny@deloitte.com]
    Sent: Wednesday, December 08, 2004 12:01 PM
    To: Paul Aviles; focus-ms@securityfocus.com
    Subject: RE: Modifying default behaviour of MS VPN client

    We've implemented this already to prevent users from saving their
    passwords. The problem is not that. If I enter NO username or
    password, the client will go back to the cached login credentials and
    try those which, lo and behold, work as the VPN server is authenticating
    to AD. What I need is a way to tell the client NOT to use cached
    credentials when told to connect with no user name and password.

    Thanks,

    Scott

    -----Original Message-----
    From: Paul Aviles [mailto:paviles@adjoined.com]
    Sent: Wednesday, December 08, 2004 11:57 AM
    To: Wozny, Scott (US - New York); focus-ms@securityfocus.com
    Subject: RE: Modifying default behaviour of MS VPN client

    Merge this on the registry, it will force the user to enter a user name
    and password and they cannot save the password.

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\Parameters]
    "DisableSavePassword"=dword:00000001

    -----Original Message-----
    From: Wozny, Scott (US - New York) [mailto:swozny@deloitte.com]
    Sent: Wednesday, December 08, 2004 10:24 AM
    To: focus-ms@securityfocus.com
    Subject: Modifying default behaviour of MS VPN client

    I have a situation on my hands where users have no username and password
    info in the MS VPN connection dialog but when they hit connect the
    client will use the username and password of the currently logged on
    user which grants them a successful authentication. Anyone know how to
    disable this behaviour and require that the user explicitly enter their
    username and password in the connection dialog for each VPN connection?

    Thanks,

    Scott

    This message (including any attachments) contains confidential
    information intended for a specific individual and purpose, and is
    protected by law. If you are not the intended recipient, you should
    delete this message. Any disclosure, copying, or distribution of this
    message, or the taking of any action based on it, is strictly
    prohibited.

    ------------------------------------------------------------------------ 

    ---
------------------------------------------------------------------------
---
This message (including any attachments) contains confidential
information intended for a specific individual and purpose, and is
protected by law.  If you are not the intended recipient, you should
delete this message.  Any disclosure, copying, or distribution of this
message, or the taking of any action based on it, is strictly
prohibited.
---------------------------------------------------------------------------
---------------------------------------------------------------------------
  • Next message: marco2: "RE: Modifying default behaviour of MS VPN client"

    Relevant Pages

    • RE: Modifying default behaviour of MS VPN client
      ... Modifying default behaviour of MS VPN client ... I have a situation on my hands where users have no username and password ... username and password in the connection dialog for each VPN connection? ...
      (Focus-Microsoft)
    • Re: Fighting the dialup side effects
      ... traffic routing per se. ... with the fact that a regular PING stops reaching internet hosts after ... previously is for VPN client connections, if this is a VPN connection, the ... At least the built-in VPN client from Microsoft ...
      (microsoft.public.windows.server.dns)
    • Re: Weird Loss of Connectivity Issue -- Help?
      ... Hard reset the cable gateway. ... When the VPN client is installed on my machine I can usually browse normally. ... If I lose my browsing ability, initiating a VPN connection restores it, and keeps it restored for some time AFTER I drop the VPN connection. ... If I uninstall the Cisco VPN client, I lose all browser connectivity. ...
      (comp.security.firewalls)
    • #5.5.0 smtp;530 Authentication required
      ... I'm currently running SBS2003 and have configured a VPN connection to my ... using my VPN client I have access to my network including my Exchange Server. ... receive this dreaded undeliverable message: ...
      (microsoft.public.exchange.connectivity)
    • Re: Password Cache
      ... CISCO VPN client manual how to do this ... "Vinny" wrote in message ... He now connects using a VPN connection however ... >>> network password is cached. ...
      (microsoft.public.win2000.security)
    • Quantcast