none
disabledomaincreds

    Question

  • Hi,

    If I set the HKLM\system\currentcontrolset\control\lsa\disabledomaincreds to 1, will it delete any other passwords already stored in the Credential Manager for Windows 7 and/or Windows XP?

    Regards


    Vinkie

    Wednesday, May 23, 2012 12:18 PM

Answers

  • HKLM\system\currentcontrolset\control\lsa\disabledomaincreds to 1 This removes the cached credential on the local system. That means any of the domain creadentials will not be cached on the local system.

    Read this,

    This setting controls the storage of authentication credentials and .NET passwords on the local system. By disabling this feature, passwords will not be stored.

    Read the below thread which discuss the same quesiton

    http://social.technet.microsoft.com/Forums/zh/winserverDS/thread/b07f7a91-4037-43d8-9b07-c72024eb78c4

    http://articles.iamnotageek.com/printer-60.html

    Regards,

    _Prashant_


    MCSA|MCITP SA|Microsoft Exchange 2003 Blog - http://prashant1987.wordpress.com Disclaimer: This posting is provided AS-IS with no warranties/guarantees and confers no rights.

    Wednesday, May 23, 2012 12:30 PM
  • As per my understanding YES. This is only for domain credentials not for local administrators or local user accounts on client system

    Read below ,

    http://answers.yahoo.com/question/index?qid=20071227051421AAv8kJ4

    Regards,

    _Prashant_


    MCSA|MCITP SA|Microsoft Exchange 2003 Blog - http://prashant1987.wordpress.com Disclaimer: This posting is provided AS-IS with no warranties/guarantees and confers no rights.

    • Marked as answer by Danie Vink Thursday, May 24, 2012 8:06 AM
    Wednesday, May 23, 2012 1:00 PM
  • The setting disabledomaincreds value to 1 it will stop storing the domain/.net credential into credential manager & this setting will not impact local accounts. Still, i would not fiddle with this setting without testing it for one of the computer while domain mass roll out of such settings.


    Awinish Vishwakarma - MVP - Directory Services

    My Blog: awinish.wordpress.com

    Disclaimer This posting is provided AS-IS with no warranties/guarantees and confers no rights.

    • Marked as answer by Danie Vink Thursday, May 24, 2012 8:06 AM
    Wednesday, May 23, 2012 2:12 PM
    Moderator

All replies

  • HKLM\system\currentcontrolset\control\lsa\disabledomaincreds to 1 This removes the cached credential on the local system. That means any of the domain creadentials will not be cached on the local system.

    Read this,

    This setting controls the storage of authentication credentials and .NET passwords on the local system. By disabling this feature, passwords will not be stored.

    Read the below thread which discuss the same quesiton

    http://social.technet.microsoft.com/Forums/zh/winserverDS/thread/b07f7a91-4037-43d8-9b07-c72024eb78c4

    http://articles.iamnotageek.com/printer-60.html

    Regards,

    _Prashant_


    MCSA|MCITP SA|Microsoft Exchange 2003 Blog - http://prashant1987.wordpress.com Disclaimer: This posting is provided AS-IS with no warranties/guarantees and confers no rights.

    Wednesday, May 23, 2012 12:30 PM
  • OK, is this for domain credentials only? What about other passwords?

    Vinkie

    Wednesday, May 23, 2012 12:45 PM
  • As per my understanding YES. This is only for domain credentials not for local administrators or local user accounts on client system

    Read below ,

    http://answers.yahoo.com/question/index?qid=20071227051421AAv8kJ4

    Regards,

    _Prashant_


    MCSA|MCITP SA|Microsoft Exchange 2003 Blog - http://prashant1987.wordpress.com Disclaimer: This posting is provided AS-IS with no warranties/guarantees and confers no rights.

    • Marked as answer by Danie Vink Thursday, May 24, 2012 8:06 AM
    Wednesday, May 23, 2012 1:00 PM
  • The setting disabledomaincreds value to 1 it will stop storing the domain/.net credential into credential manager & this setting will not impact local accounts. Still, i would not fiddle with this setting without testing it for one of the computer while domain mass roll out of such settings.


    Awinish Vishwakarma - MVP - Directory Services

    My Blog: awinish.wordpress.com

    Disclaimer This posting is provided AS-IS with no warranties/guarantees and confers no rights.

    • Marked as answer by Danie Vink Thursday, May 24, 2012 8:06 AM
    Wednesday, May 23, 2012 2:12 PM
    Moderator