IE automatically logs in to the forum!?


Fireball3

Recommended Posts

Hey guys,

I'm somewhat confused.

My new company machine is running W10.

Prior, I was used to log in to this forum with my credentials but for some reason IE does this automatically now.

I disabled the Integrated Windows Authentication although that setting shouldn't affect public sites.

I disabled autocompletion for usernames and passwords and checked the stored information - all empty.

I deleted cookies and temp files, it still logs me in at startup.

How does this work? O.o

Thanks in advance for the insights.

Link to comment

First google search came up with the following:

 

Quote

Add, remove, edit, backup, restore Stored User Names and Passwords in Windows 10

The Stored User Names and Passwords in Windows lets you securely manage user names and passwords as a part of your profile. It lets you automatically enter saved user names and passwords for various network resources, servers, websites and applications, to authenticate yourself. In this post we will see how to add, remove, edit, backup, restore Stored User Names and Passwords & Credentials in Windows 10/8/7.

rundll32.exe keymgr.dll,KRShowKeyMgr

https://www.thewindowsclub.com/stored-user-names-and-passwords-windows

Link to comment

Yes, and unfortunately No.

Those are the credentials stored for the IWA (integrated windows authentication)

The stored values at that place don't work for unRAID forums.

The same entries can be found in IE when going to:
Options, Content, Autocomplete, Manage Passwords (free translation, my OS is not English)

There you can find a second category called Web-credentials or so. Shows no entries on my side.

Link to comment

I checked my setup where I never used IE before. The default path for the cache is "C:\Users\username\AppData\Local\Microsoft\Windows\INetCache\". Did you tried the option in the settings to remove the cache and history by closing the IE? There is an extra Option for "allow caches and databases for websites" which is ticked by default. Sry, german UI but it looks like the following:

 

IE.png.fa9ef9ceb76e454579f2617c78992cf9.png

 

Maybe there are some other places storing logins and cookies.

 

Edited by bastl
Link to comment

Yes, I have set the same settings.

 

Edit:

Checked it to be 100% sure...

The setting to "Delete browser history" does NOT remove temporary files.

Check yourself, go to

"C:\Users\username\AppData\Local\Microsoft\Windows\INetCache\" and you will find lots of files in \Content.IE5\ and \Ie\.

I don't trust that setting and run a batch to delete the files.

 

Still, logs me in, even if all is deleted.

Edited by Fireball3
Link to comment

Are you using a Windows user account or a local account? The Microsoft account syncs all kind of stuff. I wouldn't be surprised if  it syncs all the login credentials you maybe have saved on an old installation. Just an idea.

 

Best solution might be to stop using the Internet Explorer 😂 Btw. does it still get's updates? I think I've read something that MS will stop the support for it with the ongoin development and implementation of Edge.

Link to comment

Ok. If it's a machine connected to a domain your profil with all it's settings might sync in the backround from a company server. Usually with every logoff or reboot this profil should sync back to the server and save any changes you made. Not actual sure if it's possible to setup by the admin in a way that login credentials are only allowed to add and change and disallowed to remove. I know for fileshares it's possible to set it up this way. The user is allowed to ad files, change existing files but aren't allowed to remove them. Sounds stupid, i know but there might be usecases for this. Not actual sure if it's possible for the credential store. Another possibility is that your companies firewall/proxy configuration caches all sorts of cookies and session information and kinda Man-In-the-Middle checks all the traffic from the clients. Lots of enterprise equipment still intercepts the connections to analyse for bad traffic and often breaks logins and webservices on non company networks.

 

Have you tried to use a portable version of a browser like firefox? No need to install, everything is stored in a single folder, let's say on the desktop. If you don't need it anymore, delete it, an everything is gone. Sure this isn't the solution for your main problem to delete the stored credentials but maybe helps to prevent future issues.

Link to comment

Just a question, are you even allowed to use the internet for private stuff on your work machine? Depending on which industry you're working, I can understand why the admins wanna prevent their user to accessing personal stuff with portable browsers. One single click on the wrong page or an personal email and the desaster is there.

Link to comment

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.