True, that is the easiest method. But if you wish to completely disable this
function, or if you have a System Policy in place that prevents users from
accessing the Internet options, then the Registry key works best.

-----Original Message-----
From: Mike Theriault [mailto:Mike_TheriaultJABIL.COM]
Sent: Wednesday, April 18, 2001 7:58 PM
To: FOCUS-MSSECURITYFOCUS.COM
Subject: Re: autocomplete passwords

Configuring auto complete is even much easier than that. To turn this
functionality off and on, all you have to do is configure the settings
inside the IE Browser by selecting [Tools, Internet Options, Content, Auto
Complete, and then deselect the checked items WebAddresses, Forms, Usernames
and passwords on forms].

As for finding out where windows stores the usernames and passwords, the
browseui.dll in the %SystemRoot%\System32 directory is the windows component
that performs the auto-complete function. If you wanted to reverse engineer
this dll then good luck.

-----Original Message-----
From: Russell Munday [mailto:rmundaySYSCAP.COM]
Sent: Wednesday, April 18, 2001 4:36 AM
To: FOCUS-MSSECURITYFOCUS.COM
Subject: FW: autocomplete passwords

To disable the storing of Passwords and Usernames, you must open the
Registry Tree HKEY_USERS. Under this, there are 2 folders Default and
another one that is much longer. Open the latter to:
Software/Policies/Microsoft/Internet Explorer/Control Panel
If these "folders", they're Keys actually, are not present, then add them to
make the path as shown. Note that spelling is very important. Now in the
Control Panel key we must create the following 2 Values:
FormSuggest
FormSuggest Passwords

These are DWORD values that must be created, each value is to be given the
data of 1. Hope this helps.

-----Original Message-----
From: NDR113 [mailto:ndr113350CC.COM]
Sent: Wednesday, April 18, 2001 1:13 AM
To: FOCUS-MSSECURITYFOCUS.COM
Subject: autocomplete passwords

Where Windows store the passwords and username that the "auto-complete"
feature of IE implement?I was looking for there on some registry key, but
after a while i stop searching... anyone knew it where they are?

**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**********************************************************************

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]