Cached user/pass cleared on reboot Keymgr.dll (xp)

[cross]

I'm having trouble with saving passwords. For example, when I save a password for Outlook (exchange), then check control keymgr.dll, it shows up in there OK. I restart Outlook, everything is fine. If I restart the computer though, keymgr.dll clears out (checked before launching Outlook again). Even more odd, when Outlook is launched, the dropdown menu for usernames is cleared out too. Usually at least that will stay after a reboot on all my other machines.

This seems like some security setting somewhere, but I can't find it anywhere. I've tried resetting all security in IE (just a hunch) with no luck. Is there any reason why all cached usernames and passwords would clear on a reboot, but do not clear out if you don't reboot?

This is happening on a few machines on our network, with no real reason why they are different from the rest. Same software etc, must have been users messing around with something somewhere.

Already been multiple places including here:
http://support.microsoft.com/default...b;en-us;290684
with no luck

Any help or guidance appriciated!

[morganlefay]

I am asuming you are using AD...

A new group policy???

MLF

[cross]

Good idea, but no new policies in quite some time, and no difference in groups between users having the issue and users not having the issue. All users are also local admins in this case as well.

I'll check the event log again, but I dont think I saw any related errors or anything, just seems to clear out on a few machines, but doesn't on the majority with the same OS and policies.

[cross]

Ok, this is definatly a computer issue, not a user account issue. Setup that same user on another box, no issue.
Next step is to rebuild his windows profile on his current box to see if it can save pw's after a reboot. If so, I still need to track down what has change/become corrupt. Rebuilding profiles on all these machines is not an option, especially if it can just happen again.

[westin]

Do any other settings revert? Homepage, bookmarks, wallpaper, etc?

[cross]

No other settings seem to clear out except stored usernames and passwords. I did notice however, when following the above link, that the registry key created when you save a password, is still present after a reboot, with the appropriate permissions. So its almost like that keymgr.dll can't read that key. I've tried playing with the permissions, but I can't get the system to read what it wrote there. I assume that key is the saved password, since the system created it at the moment I saved the password.

Odd...

[cross]

Wow, all those views, and no ideas huh?
Heres what I (we) know so far:

NOT policy related (or shouldn't be, no local policies set, and passwords stick when profile is setup on another workststion)
Affects XP only so far
Registry keys created when saving password still exist after reboot
keymgr.dll shows no entries after reboot, entries show up prior to restarting
Permissions changed from only System to Full for user for that registry key, no effect after reboot
Only effects a small handfull of users, no similar extra software installed on all effected machines, same services startup, etc.

C'mon guys, I'll try anything to find the cause, ANY idea is a good one at this point.

[nihil]

Hmmm,

no local policies set

Try this (on the client box):

Security Settings/Local Policies/Security Options/

"DoNotDisplayLastUserName" and set that to "disabled"

Check the Registry:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System

"Don'tDisplayLastUserName"

The value should be 0

I am suspecting that Outlook may be following Windows logon settings? If so it reverts to the default on reboot?

Please take a look and let me know

[cross]

Very odd, mine is set to 1 and I dont have the issue. Well worth a shot, i'll update after trying that on a few affected workstations, see what happens.

Thanks for the help!

Edit:
Tried on several machines, no dice. All were set to 1 (like mine, i have no issue like the majority of users). Changing to 0, restarting, and trying to re-enter credentials did not work. They still don't stick, not even the username dropdown box, which I still find very very odd that the username is clearing...

[nihil]

Hmmmm,

Are all the users part of a domain............if so, is it the same one?

You might try adding one of the problem machines to a domain to see if it makes any difference. I can't remember the details but I seem to recall that this can cause problems in some circumstances.