Networks

Ask something
Discussion Locked

Sharing

0 helpful
7 replies

by digital_dna 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Question...

How do I stop Windows 2000/XP from remembering login passwords on other systems on the network?

The problem:

I have a workgroup network, XP and 2000 mainly. The other day I setup the file sharing and Permissions so that anyone trying to access the administartive shares on the XP machine from another system on the network had to enter a password to do so. This worked great!

The problem is that in testing I entered the User and Password to ensure that everything was working right. Now when someone wants to access the shares on that machine all they have to do is type \\ComputerName\C$ and they are in without having to enter the password again.

My initial thought was to disable password caching, which I did by editing the registry and entering the DWORD Value DisablePwdCaching. In a perfect world this would have worked but as we know its not a perfect world... So my question is how do stop Windows 2000, (in this case) from remembering the login andpassword of the Windows XP Administrator Shares?

thanks
ebcdic

7 replies

by d_v ant

After you are finished testing, run the net use command to disconnect the share. The syntax is: "net use \\ComputerName\C$ /Delete" sans quotes. This will disconnect the drive and the user will need to re-enter the user id and password to reconnect.

by digital_dna

Thats sounded good but when I enter the command I get the following error...

The network connection could not be found!

Just for *%&#'s and giggles I tried to enter the shares on the other computer and I'm still able to access...

Any other ideas? I'm going to continue exploring the net use command.

thanks
ebcdic

by d_v ant

type net use by itself and it will show you what connections are made. Also, verify your settings for the share. Is the share set up for all users or just a specific group?

by pesk, mbcs, mcse, mcitp, sts

Go to Start, Control Panel, ADministrative Tools, Local Security Settings, Security Options and under Policy, scroll down to
[Interactive Logon:Do not display last Username;Disabled].

Since this is an explicit setting this has to be set to ENABLE in order for the registry hack to work. Meaning? You have to actually 'deny' access to the system to show the last username and since password caching is done on a username/password basis, if the username is missing, the password is discarded.

This discussion is closed to new replies.