how to stop login credentials being passed automatically?

Hi All:

I have a server running 2003 std. ed. with sp1. It's running web services
with a single website and ftpsite configured on it.

This is a development server, so neither the website nor the FTP site allow
anonymous access. The FTP site was set up without "user isolation".

I have one developer working on this site, connecting to this server
remotely from an xp pro sp2 computer, who claims that they never get a login
prompt when they connect using Internet Explorer. A long time ago they
probably checked "remember password" when prompted for their login
credentials.

If I browse to the server in IE, either with http or ftp, I receive a
windows login prompt, as do other people who have tried to connect without
passing the credentials in the URL string (for ftp).

The developer claims that they've done everything they can in Internet
Options to remove the "remembered" login, including deleting their cache,
cookies, history and clearing the password cache in "autocomplete". The only
other software they use to interact with the server Visual Studio Ent. Ed.
ver. 6 (the old Visual Studio).

This is a problem because occasionally HTML mail gets sent from this server
with URLs referencing images on a public server...if the URLs accidentally
point to the development server, someone viewing the mail in OE gets a login
prompt when they try to view the mail. The problem is, the developer never
sees that happen (he just sees the email without any errors).

Is there any place else that his login credentials would be stored on his
computer where they could be removed? Or is there some other explanation to
this phenomenon?

TIA!


.

Relevant Pages