Disable "remember password" option in Outlook
We are trying to disable the "remember password" option in Outlook 2007 and Outlook 2010 across our organization because our users keep forgetting their passwords..and when it comes time to change thier passwords (every 90 days) we get in influx of tickets for resets because users don't recall what their old password is.
We figure, we can take this option away from the end-user, thereby forcing them to enter the password in daily. I know how to disable this feature in the program itself (in email options under security there is an option to "always ask for password") but the users will just find a way to re-enable this option.
Does anyone know of a way, through a script, that will disable this feature in Outlook 2007 and 2010, or at least set the default to "always ask for password"?
I have searched through the registry settings, and haven't found anything so far. If I could find a corresponding registry key for this, I would just save the registry key to a network drive with the settings we want, then automate a regsvr32 that will import it into the end-users registry.
Does anyone know where this registry key would be located? I've googled until I'm sick, no help there. Any ideas are greatly appreciated.
-
I tried this on both Outlook 2007 and 2010 and it doesn't seem to work. The command does create the desired key, however, users still have the option to remember password. - skilled 10 years ago
-
Tried the "creating key" option which does not seem to work in Outlook 2007 or 2010. I'm using Windows 7 Pro. The command does create the desired key, however, all users still have the option to select "save the password in your password list." - skilled 10 years ago
Answers (5)
Add the 'Security" key and "PromptForCredentials" value to the registry with the following command: reg.exe add "HKCU\Software\Policies\MicroSoft\Office\12.0\Outlook\Security" /v PromptForcredentials /t REG_DWORD /d 1 /f
see if this helps
http://superuser.com/questions/444497/force-outlook-2010-to-ask-for-credentials-via-group-policy
Comments:
-
Thanks for the reply, but I found that earlier and I don't have the "security" key under the version of outlook, so there is no "PromptForCredentials" key to modify. - Strangeronfire 11 years ago
-
Did you try to create the upper key and it's subsets to see if it works any way?
reg.exe add "HKCU\Software\Policies\MicroSoft\Office\14.0\Outlook\Security" /v PromptForcredentials /t REG_DWORD /d 1 /f - SMal.tmcc 11 years ago-
for 2007 should be
reg.exe add "HKCU\Software\Policies\MicroSoft\Office\12.0\Outlook\Security" /v PromptForcredentials /t REG_DWORD /d 1 /f - SMal.tmcc 11 years ago-
I will try adding the key and subkeys - Strangeronfire 11 years ago
-
Ok, so that actually worked. Thank you, I will begin throwing together my script now that I have a key available to import to my end-users.
I really appreciate the response. - Strangeronfire 11 years ago
Click "Tools > Account Settings"
Under the "Email" tab, double-click your email account. click More settings, in that select security tab. Under 'user identification' select the check box 'always prompt for logon credentials'
Click "Next"
Click "Finish".
After that everytime you need to provide a logon credentials for login.
Rgds,
Vigesh
I found the subkey responsible, see below;
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging
Subsystem\Profiles\Outlook\13dbb0c8aa05101a9bb000aa002fc45a]
Below the profile GUID, a subkey named 00036601 has a REG_BINARY value that determines whether the user is prompted or not.
A value of 04 10 00 00 indicates that the user will not be prompted for credentials.
A value of 0C 10 00 00 indicates that the user will be prompted for credentials.
However, I cannot import a subkey without importing the entire key...which will change the outlook server settings for my end-users...so this is not a viable option to push out to an organization
Comments:
-
should be
reg.exe add "HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging
Subsystem\Profiles\Outlook\13dbb0c8aa05101a9bb000aa002fc45a]" /v 00036601 /t REG_BINARY /d 0C 10 00 00 /f - SMal.tmcc 11 years ago-
Both of your answers are viable solutions to the issue. I have tested them both independently and either way will work. I am opting for creating the subkeys for PromptForCredentials and setting the REG_DWORD to 1.
I really REALLY appreciate your help. It will help our support staff immensely. - Strangeronfire 11 years ago-
this can be pushed as a GPO or with a KIX script, or even in the login script. - SMal.tmcc 11 years ago
-
I'll be using kbox to push this registry key to all users, by first creating one for outlook 2007 and then one for 2010 and pushing them both to all machines. - Strangeronfire 11 years ago
-
you will need an online script or use active setup for a offline script
http://www.itninja.com/blog/view/active-setup. - SMal.tmcc 11 years ago-
exactly right - Strangeronfire 11 years ago
-
If you use a VBScript file to change the registry setting you can call out just the bit that needs changed. I struggled with a bunch of Hooey for 8 years to find how to change the binary key. People were saying you have to import the key then disect it then re-write it. 8 years later an India Indian told me all you have to do is call out that portion.
Here is a snippet from my script where I did this for Auto Detect Settings
Sub AutoDetectSettings
strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections"
strValue = "DefaultConnectionSettings"
'Retrieve the current settings.
objReg.GetBinaryValue HKEY_CURRENT_USER, strKeyPath, strValue, binValue
' Remove Checkmark from "Automatically detect settings" and turn on checkmark
' for Use Automatic Configuration Script box.
binValue(8) = 05 - dondreak 10 years ago
>I am opting for creating the subkeys for PromptForCredentials
...in which case, forget script and do this via Group Policy. There's no way around it, then.
Click Tools -> Select Options -> Setup tab and then click “Email Accounts”.
Click on “View or change existing e-mail accounts” and click “Next”. Click on the account and then click ‘Change’. Uncheck the mark next to remember password and click Next and then OK.
Regards
Sarah
Comments:
-
Thank you for the response, but I was looking for a way to automate this across an organization and I figured out how. - Strangeronfire 11 years ago