> Also take a look at the IEAK, if you want to deploy a version of IE
that
> has that disabled already, and configured so that the average user
can't
> re-enable it.
>
> TTYL
> Darren
>
>
> > -----Original Message-----
> > From: Tim Recher [mailto:timrMIT.EDU]
> > Sent: Friday, January 04, 2002 10:58 AM
> > To: focus-mssecurityfocus.com
> > Subject: Re: Removing login data from MSIE
> >
> > Unfortunately, I don't know how to remove the information directly
from
> > the
> > registry (at least not without breaking things). To clear the
> information
> > using IE, go to Tool->Options, choose the Content tab, and click the
> > AutoComplete button. You can then click the necessary buttons to
remove
> > the stored data for passwords and forms (and you can also turn off
> > AutoComplete).
> >
> > To disable password caching via the registry, I recommend taking a
look
> at
> > MS KnowledgeBase article Q229940.
> >
> > Tim
> >
> > At 05:06 AM 1/4/2002, you wrote:
> > >Hi you all,
> > >
> > >We have a security hole here to which I haven't found a solution
yet.
> > >When browsing the Internet with MSIE (5.5sp2) you have the
possibility
> to
> > >let MSIE remember the login data for a site you visit. That can
come in
> > >handy for some users, but... We have a general user account (sort
of
> > guest
> > >account) for visitors who need to look something at the net. This
means
> > that
> > >more than one person uses this account. However not everybody is
bright
> > >enough NOT to let MSIE remember the login data.
> > >
> > >Can anyone tell me where MSIE keeps the data, and how can we remove
it?
> >
> > --
> > Tim Recher timrmit.edu
> > Systems Administrator
> > MIT Alumni/ae Association
> > Phone: 617-253-7008 Fax: 617-252-1641

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]