Windows 7 Erases Network Passwords on Local Password Change
We have a Windows 7 PC that is not joined to our enterprise domain (which I will call "domain"), and this PC has several local accounts. All of the PC's local accounts have a mapped network drive which uses a specific domain account, say, "domainspecialuser," that is used to access a network share that is in the domain.
Because of CA-DOJ policy, passwords for the local accounts on the machine must be changed every 30 days. Whenever the anyone's local password is changed however, Windows 7 promptly erases their stored credentials, even though we marked "Remember My Credentials" when mapping the drive. Furthermore, the password for the domain account used to access the network share is not changing.
Why is Windows 7 eradicating the mapping credentials? Shouldn't this not change? Is there some "secret" (i.e., I don't know about) policy setting that controls this behavior? Google search and SO/SU search turned up nothing but 'how to erase mappings...' not helpful.
windows-7 passwords credentials mapped-drive
asked Dec 14 '18 at 16:43
David Mancini
466
|
show 8 more comments
We have a Windows 7 PC that is not joined to our enterprise domain (which I will call "domain"), and this PC has several local accounts. All of the PC's local accounts have a mapped network drive which uses a specific domain account, say, "domainspecialuser," that is used to access a network share that is in the domain.
Because of CA-DOJ policy, passwords for the local accounts on the machine must be changed every 30 days. Whenever the anyone's local password is changed however, Windows 7 promptly erases their stored credentials, even though we marked "Remember My Credentials" when mapping the drive. Furthermore, the password for the domain account used to access the network share is not changing.
Why is Windows 7 eradicating the mapping credentials? Shouldn't this not change? Is there some "secret" (i.e., I don't know about) policy setting that controls this behavior? Google search and SO/SU search turned up nothing but 'how to erase mappings...' not helpful.
windows-7 passwords credentials mapped-drive
asked Dec 14 '18 at 16:43
David Mancini
466
Issues specific to corporate IT support and networks are not treated here.
– harrymc
Dec 14 '18 at 16:49
Do you enforce local policy restrictions on this stand-alone machine? ..And if so, do you enforce this setting in local policy? Network access: Do not allow storage of passwords and credentials for network authentication
– thepip3r
Dec 14 '18 at 16:50
@thepip3r No, that setting is not touched. The mappings seem to store just fine. Until the local account password expiration policy kicks in. At which point it kills their mappings as well.
– David Mancini
Dec 14 '18 at 17:04
1
@harrymc - Also, this isn't really a question about the "enterprise" or "corporate" part. I specifically said this machine is NOT on the domain. It is a one-off machine, with what I suspect is a Windows-7-born issue, not a corporate configuration issue. We use no GPO whatsoever on this machine, aside from the password policy, which is controlled directly from the machine itself, not from a "corporate" network.
– David Mancini
Dec 14 '18 at 17:19
1
How are the local passwords getting changed? Is the Reset Password functionality being used, or are the accounts being logged in and the passwords changed through the normal "Change Password" functionality?
– Twisty Impersonator
Dec 14 '18 at 18:41
|
show 8 more comments
We have a Windows 7 PC that is not joined to our enterprise domain (which I will call "domain"), and this PC has several local accounts. All of the PC's local accounts have a mapped network drive which uses a specific domain account, say, "domainspecialuser," that is used to access a network share that is in the domain.
Because of CA-DOJ policy, passwords for the local accounts on the machine must be changed every 30 days. Whenever the anyone's local password is changed however, Windows 7 promptly erases their stored credentials, even though we marked "Remember My Credentials" when mapping the drive. Furthermore, the password for the domain account used to access the network share is not changing.
Why is Windows 7 eradicating the mapping credentials? Shouldn't this not change? Is there some "secret" (i.e., I don't know about) policy setting that controls this behavior? Google search and SO/SU search turned up nothing but 'how to erase mappings...' not helpful.
windows-7 passwords credentials mapped-drive
asked Dec 14 '18 at 16:43
David Mancini
466
We have a Windows 7 PC that is not joined to our enterprise domain (which I will call "domain"), and this PC has several local accounts. All of the PC's local accounts have a mapped network drive which uses a specific domain account, say, "domainspecialuser," that is used to access a network share that is in the domain.
Because of CA-DOJ policy, passwords for the local accounts on the machine must be changed every 30 days. Whenever the anyone's local password is changed however, Windows 7 promptly erases their stored credentials, even though we marked "Remember My Credentials" when mapping the drive. Furthermore, the password for the domain account used to access the network share is not changing.
Why is Windows 7 eradicating the mapping credentials? Shouldn't this not change? Is there some "secret" (i.e., I don't know about) policy setting that controls this behavior? Google search and SO/SU search turned up nothing but 'how to erase mappings...' not helpful.
windows-7 passwords credentials mapped-drive
windows-7 passwords credentials mapped-drive
asked Dec 14 '18 at 16:43
David Mancini
466
asked Dec 14 '18 at 16:43
David Mancini
466
asked Dec 14 '18 at 16:43
David Mancini
466
asked Dec 14 '18 at 16:43
David Mancini
466
asked Dec 14 '18 at 16:43
David Mancini
466
466
Issues specific to corporate IT support and networks are not treated here.
– harrymc
Dec 14 '18 at 16:49
Do you enforce local policy restrictions on this stand-alone machine? ..And if so, do you enforce this setting in local policy? Network access: Do not allow storage of passwords and credentials for network authentication
– thepip3r
Dec 14 '18 at 16:50
@thepip3r No, that setting is not touched. The mappings seem to store just fine. Until the local account password expiration policy kicks in. At which point it kills their mappings as well.
– David Mancini
Dec 14 '18 at 17:04
1
@harrymc - Also, this isn't really a question about the "enterprise" or "corporate" part. I specifically said this machine is NOT on the domain. It is a one-off machine, with what I suspect is a Windows-7-born issue, not a corporate configuration issue. We use no GPO whatsoever on this machine, aside from the password policy, which is controlled directly from the machine itself, not from a "corporate" network.
– David Mancini
Dec 14 '18 at 17:19
1
How are the local passwords getting changed? Is the Reset Password functionality being used, or are the accounts being logged in and the passwords changed through the normal "Change Password" functionality?
– Twisty Impersonator
Dec 14 '18 at 18:41
|
show 8 more comments
Issues specific to corporate IT support and networks are not treated here.
– harrymc
Dec 14 '18 at 16:49
Do you enforce local policy restrictions on this stand-alone machine? ..And if so, do you enforce this setting in local policy? Network access: Do not allow storage of passwords and credentials for network authentication
– thepip3r
Dec 14 '18 at 16:50
@thepip3r No, that setting is not touched. The mappings seem to store just fine. Until the local account password expiration policy kicks in. At which point it kills their mappings as well.
– David Mancini
Dec 14 '18 at 17:04
1
@harrymc - Also, this isn't really a question about the "enterprise" or "corporate" part. I specifically said this machine is NOT on the domain. It is a one-off machine, with what I suspect is a Windows-7-born issue, not a corporate configuration issue. We use no GPO whatsoever on this machine, aside from the password policy, which is controlled directly from the machine itself, not from a "corporate" network.
– David Mancini
Dec 14 '18 at 17:19
1
How are the local passwords getting changed? Is the Reset Password functionality being used, or are the accounts being logged in and the passwords changed through the normal "Change Password" functionality?
– Twisty Impersonator
Dec 14 '18 at 18:41
Issues specific to corporate IT support and networks are not treated here.
– harrymc
Dec 14 '18 at 16:49
Issues specific to corporate IT support and networks are not treated here.
– harrymc
Dec 14 '18 at 16:49
Do you enforce local policy restrictions on this stand-alone machine? ..And if so, do you enforce this setting in local policy? Network access: Do not allow storage of passwords and credentials for network authentication
– thepip3r
Dec 14 '18 at 16:50
Do you enforce local policy restrictions on this stand-alone machine? ..And if so, do you enforce this setting in local policy? Network access: Do not allow storage of passwords and credentials for network authentication
– thepip3r
Dec 14 '18 at 16:50
@thepip3r No, that setting is not touched. The mappings seem to store just fine. Until the local account password expiration policy kicks in. At which point it kills their mappings as well.
– David Mancini
Dec 14 '18 at 17:04
@thepip3r No, that setting is not touched. The mappings seem to store just fine. Until the local account password expiration policy kicks in. At which point it kills their mappings as well.
– David Mancini
Dec 14 '18 at 17:04
1
1
@harrymc - Also, this isn't really a question about the "enterprise" or "corporate" part. I specifically said this machine is NOT on the domain. It is a one-off machine, with what I suspect is a Windows-7-born issue, not a corporate configuration issue. We use no GPO whatsoever on this machine, aside from the password policy, which is controlled directly from the machine itself, not from a "corporate" network.
– David Mancini
Dec 14 '18 at 17:19
@harrymc - Also, this isn't really a question about the "enterprise" or "corporate" part. I specifically said this machine is NOT on the domain. It is a one-off machine, with what I suspect is a Windows-7-born issue, not a corporate configuration issue. We use no GPO whatsoever on this machine, aside from the password policy, which is controlled directly from the machine itself, not from a "corporate" network.
– David Mancini
Dec 14 '18 at 17:19
1
1
How are the local passwords getting changed? Is the Reset Password functionality being used, or are the accounts being logged in and the passwords changed through the normal "Change Password" functionality?
– Twisty Impersonator
Dec 14 '18 at 18:41
How are the local passwords getting changed? Is the Reset Password functionality being used, or are the accounts being logged in and the passwords changed through the normal "Change Password" functionality?
– Twisty Impersonator
Dec 14 '18 at 18:41
|
show 8 more comments
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1383637%2fwindows-7-erases-network-passwords-on-local-password-change%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1383637%2fwindows-7-erases-network-passwords-on-local-password-change%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Issues specific to corporate IT support and networks are not treated here.
– harrymc
Dec 14 '18 at 16:49
Do you enforce local policy restrictions on this stand-alone machine? ..And if so, do you enforce this setting in local policy? Network access: Do not allow storage of passwords and credentials for network authentication
– thepip3r
Dec 14 '18 at 16:50
@thepip3r No, that setting is not touched. The mappings seem to store just fine. Until the local account password expiration policy kicks in. At which point it kills their mappings as well.
– David Mancini
Dec 14 '18 at 17:04
1
@harrymc - Also, this isn't really a question about the "enterprise" or "corporate" part. I specifically said this machine is NOT on the domain. It is a one-off machine, with what I suspect is a Windows-7-born issue, not a corporate configuration issue. We use no GPO whatsoever on this machine, aside from the password policy, which is controlled directly from the machine itself, not from a "corporate" network.
– David Mancini
Dec 14 '18 at 17:19
1
How are the local passwords getting changed? Is the Reset Password functionality being used, or are the accounts being logged in and the passwords changed through the normal "Change Password" functionality?
– Twisty Impersonator
Dec 14 '18 at 18:41