We've implemented this already to prevent users from saving their
passwords. The problem is not that. If I enter NO username or
password, the client will go back to the cached login credentials and
try those which, lo and behold, work as the VPN server is authenticating
to AD. What I need is a way to tell the client NOT to use cached
credentials when told to connect with no user name and password.
Thanks,
Scott
-----Original Message-----
From: Paul Aviles [mailto:paviles@adjoined.com]
Sent: Wednesday, December 08, 2004 11:57 AM
To: Wozny, Scott (US - New York); focus-ms@securityfocus.com
Subject: RE: Modifying default behaviour of MS VPN client
Merge this on the registry, it will force the user to enter a user name
and password and they cannot save the password.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\Parameters]
"DisableSavePassword"=dword:00000001
-----Original Message-----
From: Wozny, Scott (US - New York) [mailto:swozny@deloitte.com]
Sent: Wednesday, December 08, 2004 10:24 AM
To: focus-ms@securityfocus.com
Subject: Modifying default behaviour of MS VPN client
I have a situation on my hands where users have no username and password
info in the MS VPN connection dialog but when they hit connect the
client will use the username and password of the currently logged on
user which grants them a successful authentication. Anyone know how to
disable this behaviour and require that the user explicitly enter their
username and password in the connection dialog for each VPN connection?
Thanks,
Scott
This message (including any attachments) contains confidential
information intended for a specific individual and purpose, and is
protected by law. If you are not the intended recipient, you should
delete this message. Any disclosure, copying, or distribution of this
message, or the taking of any action based on it, is strictly
prohibited.
------------------------------------------------------------------------
---
------------------------------------------------------------------------
---
This message (including any attachments) contains confidential information
intended for a specific individual and purpose, and is protected by law. If
you are not the intended recipient, you should delete this message. Any
disclosure, copying, or distribution of this message, or the taking of any
action based on it, is strictly prohibited.
---------------------------------------------------------------------------
---------------------------------------------------------------------------
