Windows Client TechCenter >
Windows 7 Forums
>
Windows 7 Security
>
Windows Needs Your [Domain] Current Credentials, Over and Over
Windows Needs Your [Domain] Current Credentials, Over and Over
- I installed Windows 7 RC on a computer at work, and joined it to our domain ok. I can log in fine, but any time I try to access a network resourcce, it says Windows needs my current credentials. I tried adding my domain, username and password to the credentials manager as both a generic and a Windows one, but it continues to prompt me for my credentials, then immediatly forget them.
Answers
- I found the issue.
Someone had set a flag on my account to use DES encryption to store the password. I tried anouther account that didn't use DES and it works fine on the domain.
Windows 7 people, please add support for DES encrypted user accounts.- Marked As Answer bySaMcp1123AnswererMonday, June 08, 2009 11:13 PM
All Replies
- Run the following from an elevated command prompt (right-click -> Run as administrator):
reg query HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\disabledomaincreds
If the key exists (with a value of 1) it means your company has disabled storing domain credentials through group policy.
Value Name: disabledomaincreds Value Type: REG_DWORD Values: 0 = allow domain credentials to be stored 1 = do not store domain credentials- Edited byRyan Capp Wednesday, May 27, 2009 6:25 AMFormatting
- Hey
I checked, and it's set to 0. - Are you part of the domain or just "connected" to the network?
- No, I'm a full member of the domain. My computer is joined and says "member of: mydomain.edu"
- Hello The White Rabbit,
Has your issue been resolved yet? Please let us know. - No, it's still very much a problem. I applied the security update to CapCOM today and it didn't help. All other updates are applied.
Every time I try to access a network resource, even my shared space on the server, it prompts me for passwords, and it keeps saying Windows needs my current credentials.
Funny thing is my friend here has Windows 7 Beta, and it works fine, he can access any network resources without being prompted constantly to lock his computer.
So something broke in the RC. - Hello The White Rabbit,
Are you behind a proxy on your domain? I have experienced this same issue when logging in through a proxy. I give my user name and password and in 5 seconds it will ask again and every 5 seconds there after. - I found the issue.
Someone had set a flag on my account to use DES encryption to store the password. I tried anouther account that didn't use DES and it works fine on the domain.
Windows 7 people, please add support for DES encrypted user accounts.- Marked As Answer bySaMcp1123AnswererMonday, June 08, 2009 11:13 PM
- Do we have a solution for this issue yet. It appears to mainly happen when you are doing a fresh install and not an upgrade.
- I am having this same issue however with Windows XP Pro, sp3. It just all of a suddent started a few weeks ago. Not sure what changed? We run Win 2000 server (old I know) It just keeps asking for current window credentials over and over and tells you to do a ctrl/alt/del to fix it but that doesn't help. We then lose all network functions. Help?? THANKS!
- This worked for me. open DSA.msc account properties and scroll down to remove the DES check box.
- Where do i find the dsa.msc account? In AD? Sorry - not sure. Thank you!!!!
Tina Ok - so I know the dsa.msc opens the AD, but where do I go to find the DES check box? thank you!
- never mind found it - however for this user, DES is not checked??
- Any other ideas as to why this is happening. It shuts down all printing and network resources. Sometimes restarting helps, sometimes it doesn't, sometimes releasing and renewing ip's help, sometimes not - just random and weird. I have ran this network for 15 years and have never seen this so wasn't sure why all of a sudden it would start doing this. Thanks for ANY help!!
- Please post the results of ipconfig /all from a domain controller and from an affected work station.
Kerry Brown MS-MVP - Windows Desktop Experience - From affected machine: ip - 10.73.76.45 subnet 255.255.0.0 gateway 10.73.73.1 dhcp server 10.73.73.12 dns servers 10.73.73.33 and 10.73.73.27
from dc: ip 10.73.73.3 subnet 255.255.0.0 gateway 10.73.73.1 dns 10.73..73.33 and 10.73.73.27
anything else you need? - Looks OK assuming the DNS servers are AD integrated. What are the results when you lookup a server with a share on it?
nslookup servername
also ping the same server.
Kerry Brown MS-MVP - Windows Desktop Experience - ping comes back great at the address and the nslookup is the same.
- I was thinking a DNS problem but it looks like that's not it. I'm out of ideas.
Kerry Brown MS-MVP - Windows Desktop Experience - Yeah - me too. One of my teachers is very frustrated. He just emailed me this morning that it happens a lot when he tries to print to a shared printer - one running off another machine and not directly hooked to a drop. So i'm going to look at that angle. it is really really weird. i am looking at my wireless radio setup as well - it happens wireless a lot. thanks for your ideas.
- for kerberos issue in win7, this could be the culprit.
please check this out http://technet.microsoft.com/en-us/library/dd560670%28WS.10%29.aspx and make the changes to enable DES encryption.
