Results 1 to 5 of 5

Thread: Turn Password Chaching On

  1. #1

    Turn Password Chaching On

    I was wondering how do i turn password chaching on? i am running Windows 98 SE.

  2. #2
    Senior Member Wazz's Avatar
    Join Date
    Apr 2003
    In Internet Explorer, go to Tools, Internet Options, Content, AutoComplete...Happy Caching!
    "It is a shame that stupidity is not painful" - Anton LaVey

  3. #3
    Just Another Geek
    Join Date
    Jul 2002
    Rotterdam, Netherlands
    Or if you mean in a windows NT domain:

    Oliver's Law:
    Experience is something you don't get until just after you need it.

  4. #4
    Join Date
    Feb 2003
    by the way ... what is the purpose of pwd caching on a 95/98/nt workstation ... if i'm correct they don't use Active directory and are so much more insecure... why in the world would you wanna cache the domain pwds on them and therefore in case of a breach compromise the whole domain??? ... just wondering, if i'm incorrect in my assumption, please let me know...

  5. #5
    Senior Member
    Join Date
    Sep 2001
    Caching domain credentials on workstations is usefull if the computer gets disconnected from the network or the PDC/BDC/DC is down. Instead of having the whole building run after me (the admin), people can still logon to there usual computer, where usual means a computer where the user was one of the last 10 (by default I believe, configurable via group policies) to log on that computer.

    By the way, cached credentials are stored under the LSA Secrets registry key HKLM\SECURITY\Policy\Secrets. NT4 pre sp3 was very vulnerable to LSA secrets theft as they were in cleartext. Post SP3 and W2k which encrypt them with syskey are still somewhat vulnerable to lsadump2 which uses dll injection to "get arround" syskey, but require the SeDebugPrivilege which only the Administrator account has by default. Still, if one were to get admin access first, lsa secrets are up for grabs!

    Granted, this introduces some level of insecurity, but the practical factor to this usually outweights it.

    You can however disable caching by setting the number of last logons cached to 0 using local/group policies.

    Credit travels up, blame travels down -- The Boss

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts