Re: Modifying default behaviour of MS VPN client

From: Caeser Augustus (caeser.augustus_at_gmail.com)
Date: 12/09/04

  • Next message: Wozny, Scott (US - New York): "RE: Modifying default behaviour of MS VPN client" 
    Date: Thu, 9 Dec 2004 15:56:10 +0530
To: "Wozny, Scott (US - New York)" <swozny@deloitte.com>

    Would you be willing to completely disable CredentialCaching ?

    On Wed, 8 Dec 2004 12:26:17 -0500, Wozny, Scott (US - New York)
    <swozny@deloitte.com> wrote:
    > Yes it is. With that checked, it still allows users to clear the
    > username and password and have the client retrieve the login credentials
    > from the cache. Also, we've made sure to uncheck 'automatically use my
    > user name and password' to no effect. It appears this just keeps the
    > client from trying the login credentials by default, but still allows
    > the user to clear their fields in the dialog which causes the client to
    > go back to the cache. Puzzling... I think the solution (if there is
    > one) will be something lower level in a registry key that will likely
    > have a name like 'DontRetrieveLoginCredentialsFromCache=1' or something
    > like that but my research into the MSKB hasn't yielded any such key.
    >
    > Any other suggestions would be greatly appreciated,
    >
    > Scott
    >
    >
    >
    >
    > -----Original Message-----
    > From: Marco Peretti [mailto:marcop@neovalens.com] On Behalf Of marco2
    > Sent: Wednesday, December 08, 2004 12:05 PM
    > To: Wozny, Scott (US - New York); focus-ms@securityfocus.com
    > Subject: RE: Modifying default behaviour of MS VPN client
    >
    > Scott
    >
    > Is the option "Prompt for user name & password" in the Options tab
    > checked?
    >
    > Cheers,
    >
    > Marco
    >
    > -----Original Message-----
    > From: Wozny, Scott (US - New York) [mailto:swozny@deloitte.com]
    > Sent: Wednesday, December 08, 2004 4:24 PM
    > To: focus-ms@securityfocus.com
    > Subject: Modifying default behaviour of MS VPN client
    >
    > I have a situation on my hands where users have no username and password
    > info in the MS VPN connection dialog but when they hit connect the
    > client will use the username and password of the currently logged on
    > user which grants them a successful authentication. Anyone know how to
    > disable this behaviour and require that the user explicitly enter their
    > username and password in the connection dialog for each VPN connection?
    >
    > Thanks,
    >
    > Scott
    >
    > This message (including any attachments) contains confidential
    > information intended for a specific individual and purpose, and is
    > protected by law. If you are not the intended recipient, you should
    > delete this message. Any disclosure, copying, or distribution of this
    > message, or the taking of any action based on it, is strictly
    > prohibited.
    >
    > ------------------------------------------------------------------------
    > ---
    > ------------------------------------------------------------------------
    > ---
    >
    > This message (including any attachments) contains confidential information intended for a specific individual and purpose, and is protected by law. If you are not the intended recipient, you should delete this message. Any disclosure, copying, or distribution of this message, or the taking of any action based on it, is strictly prohibited.
    >
    > ---------------------------------------------------------------------------
    > ---------------------------------------------------------------------------
    >
    >

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Wozny, Scott (US - New York): "RE: Modifying default behaviour of MS VPN client"

    Relevant Pages

    • Re: Terminal Services Client 6.0 Authentication
      ... The problem we are having is that the username that is being cached is ... Each one is a unique machine, and as such the client should ... allow you to save a set of credentials for each. ... Credentials are not stored in the rdp file any more. ...
      (microsoft.public.windowsxp.work_remotely)
    • Re: Need to write an HTTP server , can i use a webservice with "NOSOAP"?
      ... username / pw is to just use credentials in the XML - i.e. ... line-of-sight between client and server, ...
      (microsoft.public.dotnet.languages.csharp)
    • Re: Secure Access to Web Service.
      ... I want to basically pass ArrayList object or any other types to the client? ... Windows Domain Accounts ... The client app will need to pass its username ... and password via web service proxy credentials. ...
      (microsoft.public.dotnet.framework.webservices)
    • Re: Integrated Authentication in an Intranet
      ... IIS is only aware of the client's username if the client chooses to send ... This may be the credentials that the user is logged on as, ...
      (microsoft.public.inetserver.iis.security)
    • Re: BASIC authentication Issues with IE - Part II - Solved but WHY?
      ... it does not know the difference between a request from IE or from ... some other HTTP client. ... Some other authentication schemes are more ... IIS can sometimes remember the token for a particular set of credentials so ...
      (microsoft.public.inetserver.iis.security)