locked
1 Generic Login - Multiple Staff Teams login security flaw with Teams RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    We have a generic login on a PC in one of our conference rooms, however multiple users login to the Teams installation under this Windows login.  Once a user has logged in once and then signed out, Teams allows re-login with just an email address and never asks for the password again.  I've also replicated this on my home PC.

    I've tried uninstalling Teams and re-installing, and it still allows login without a password.
    I've also tried clearing out the keys in the registry too.
    Credential Manager does not have any information in there either.

    Does anyone know how to clear out the credentials and get Teams to ask for a password every time someone logs in?

    I guess there is no point in having a Sign out button if it remembers the password?

    Saturday, July 25, 2020 7:25 AM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Burner,

    Do all the users in your environment have the same problem?

    I tested in my environment. It needs to reenter the password to log in when I sign out the Teams client.

    It recommends you try to clear your client cache as below:

    1. Go to File Explorer, and type in %appdata%\Microsoft\teams.

    2. Once in the directory, delete any file in the following folders:

       %appdata%\Microsoft\teams\application cache\cache

       %appdata%\Microsoft\teams\blob_storage

       %appdata%\Microsoft\teams\Cache

       %appdata%\Microsoft\teams\databases

       %appdata%\Microsoft\teams\GPUcache

       %appdata%\Microsoft\teams\IndexedDB

       %appdata%\Microsoft\teams\Local Storage

       %appdata%\Microsoft\teams\tmp

    This Microsoft Online: Microsoft Team Forum will be migrating to a new home on Microsoft Q&A, please refer to this sticky post for more details.

    Best Regards,
    Sharon Zhao

    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contacttnsf@microsoft.com.
    Microsoft Online: Microsoft Team will be migrating to a new home on Microsoft Q&A! We invite you to post new questions in the new forum.

    For more information, please refer to the sticky post.


    Monday, July 27, 2020 6:21 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Sharon,

    I have signed out and deleted all items from Appdata\roaming and appdata\local relating to Teams on this user profile and on my personal laptop, then logged off the device and back on again and still get no request for a password after Teams installs.  These are machine based installations.  I went through the registry and searched for the teams email address I used to login and deleted all the keys relating to that too.

    This PC is the only one that has Teams installed for use under 1 login (not on the domain).  The rest of the PC's on site are on the domain, however still have the same issue of logging off and then back on without a request for a password.  This is not so much of a concern because the login is at least protected by their domain account.

    Monday, July 27, 2020 8:57 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Burner,

    Do you try this scenario with other Office 365 apps?

    You can check if health status of Teams service is well in Microsoft 365 admin center as below:

    Best Regards,
    Sharon Zhao

    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Friday, July 31, 2020 9:22 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Hi Sharon,

    There is nothing helpful on this page, and there are no other office apps running on this machine.  On my personal laptop, I have Office 2016 and they are not signed in.
    Wednesday, August 5, 2020 11:43 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Try modify C:\Users\<username>\AppData\Roaming\Microsoft\Teams\desktop-config.json

    Change: IsLoggedOut to $true and other entries related to logon .. 

    When (if) u get this working, i recommend set this desktop-config.json file to read-only (as Teams likes to rewrite it). 

    Thursday, August 6, 2020 4:58 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Burner,

    What authentication and verification methods do you use in Azure Active Directory?

    You can learn more by this link: https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-methods.

    Best Regards,
    Sharon Zhao

    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Friday, August 7, 2020 9:44 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    This forum will be locked down on 8/10/2020. We have created a copy of it on Microsoft Q&A Platform. Kindly register the Microsoft Q&A Platform and continue the discussion out there with us.

    [Microsoft Q&A thread link]: https://docs.microsoft.com/en-us/answers/questions/63063/1-generic-login-multiple-staff-teams-login-securit.html?childToView=63123#answer-63123

    Best Regards,
    Sharon Zhao

    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Monday, August 10, 2020 6:49 AM