Re: how to stop login credentials being passed automatically?

Have them check in IE under Tools / Internet Option, on Security tab,
with appropriate zone highlighted (Intranet?) click on Custom and scroll
to the User Authentication section at the bottom. There they should have
selected Prompt for user name and password
It is also possible that the dev server is seen as being in Intranet zone
on the one person's PC but in Internet by the rest.
--
Roger Abell
Microsoft MVP (Windows Server : Security)


"geek-y-guy" <noone@xxxxxxxxxxx> wrote in message
news:u597GttlGHA.4076@xxxxxxxxxxxxxxxxxxxxxxx
Hi All:

I have a server running 2003 std. ed. with sp1. It's running web services
with a single website and ftpsite configured on it.

This is a development server, so neither the website nor the FTP site
allow anonymous access. The FTP site was set up without "user isolation".

I have one developer working on this site, connecting to this server
remotely from an xp pro sp2 computer, who claims that they never get a
login prompt when they connect using Internet Explorer. A long time ago
they probably checked "remember password" when prompted for their login
credentials.

If I browse to the server in IE, either with http or ftp, I receive a
windows login prompt, as do other people who have tried to connect without
passing the credentials in the URL string (for ftp).

The developer claims that they've done everything they can in Internet
Options to remove the "remembered" login, including deleting their cache,
cookies, history and clearing the password cache in "autocomplete". The
only other software they use to interact with the server Visual Studio
Ent. Ed. ver. 6 (the old Visual Studio).

This is a problem because occasionally HTML mail gets sent from this
server with URLs referencing images on a public server...if the URLs
accidentally point to the development server, someone viewing the mail in
OE gets a login prompt when they try to view the mail. The problem is, the
developer never sees that happen (he just sees the email without any
errors).

Is there any place else that his login credentials would be stored on his
computer where they could be removed? Or is there some other explanation
to this phenomenon?

TIA!



.

Relevant Pages

  • Re: how to stop login credentials being passed automatically?
    ... Microsoft MVP (Windows Server: Security) ... login prompt when they connect using Internet Explorer. ... The developer claims that they've done everything they can in Internet ...
    (microsoft.public.windows.server.security)
  • Re: Urgent! New router and big disaster
    ... The SBS DNS server, running on ... its IP it means that your problem is now DNS. ... forward ports to it reliably in the router. ... I should have been more clear about internet connection.. ...
    (microsoft.public.windows.server.sbs)
  • Re: RWW Disconnecting
    ... I have been connected from a remote site for about 3 ... DHCP server and even a wireless access ... the key codes to for Internet access. ... Client Workstations} ...
    (microsoft.public.windows.server.sbs)
  • Re: Urgent! New router and big disaster
    ... I checked the binding order and the Server Local area connection is at the top. ... I should have been more clear about internet connection.. ... I wonder if I may have missed a firewall setting on the router as well. ...
    (microsoft.public.windows.server.sbs)
  • RE: remote access SBS 2003 Inop
    ... Since you know the problem is relate to RRAS (Routing and Remote Access ... On the SBS 2003 Server open the Server Management console. ... Click the "Connect to the Internet" link. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)