IIS Server Security - Remember My Password checkbox

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > March 2006 > Remember My Password checkbox





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Remember My Password checkbox
P James

2006-03-06, 5:54 pm


Hi,

I have a website that requires basic authentication. Is there a way I can
prevent users of my site from seeing and having the option to check the
Remember My Password checkbox?

Thanks,
PJ



Leon Mayne

2006-03-06, 5:54 pm

P James wrote:
> I have a website that requires basic authentication. Is there a way
> I can prevent users of my site from seeing and having the option to
> check the Remember My Password checkbox?


No, it's a browser setting, and you can't control it server side.


P James

2006-03-07, 5:54 pm


"Leon Mayne" <nospam@nospam.com> wrote in message
news:uIXMdYWQGHA.4264@TK2MSFTNGP11.phx.gbl...
> P James wrote:
>
> No, it's a browser setting, and you can't control it server side.
>
>


Thanks for the response. I can't seem to find this browser setting. Is it
exposed in Tools|Options? Would you mind pointing me to it?

Thx.
PJ



Leon Mayne

2006-03-08, 5:56 pm

P James wrote:
> Thanks for the response. I can't seem to find this browser setting.
> Is it exposed in Tools|Options? Would you mind pointing me to it?


Sorry, I should have said it's a feature of a browser and not a setting. As
far as I know in IE you can't disable it. Perhaps there is something in
group policy that you can use to remove it, but I don't know of any such
setting.


Keith

2006-03-21, 3:16 am

No. And to be honest, I would reconsider basic authentication as it just
encodes passwords ... not encrypts them.

However, if you're using ASP.Net perhaps you can switch to Forms based
authentication and save yourself a lot of concern about people checking to
remember the password:

http://www.4guysfromrolla.com/webtech/110701-1.shtml

Though you'll still not be encrypted.

"P James" wrote:

>
> Hi,
>
> I have a website that requires basic authentication. Is there a way I can
> prevent users of my site from seeing and having the option to check the
> Remember My Password checkbox?
>
> Thanks,
> PJ
>
>
>
>

Leon Mayne

2006-03-21, 3:16 am

Keith wrote:
> However, if you're using ASP.Net perhaps you can switch to Forms based
> authentication and save yourself a lot of concern about people
> checking to remember the password:


They could still use a browser password manager to 'remeber' their details
though.


Keith

2006-03-21, 3:16 am

True, but the bigger concern is having that password hashed in the registry
where there's no intuitive way to remove it. Most people use corporate
domain credentials and don't like this occuring. In any scenario, 2-way
authentication by using a username/password and RSA badge or one-time passes
are great ... but not economical.

"Leon Mayne" wrote:

> Keith wrote:
>
> They could still use a browser password manager to 'remeber' their details
> though.
>
>
>

Nancy R

2006-03-21, 5:56 pm

Hi,

Try the instructions in this article:

http://support.microsoft.com/kb/q229940/

They are for IE 5.5 but worked great on IE 6.0 in our office.

Nancy

"P James" wrote:

>
> "Leon Mayne" <nospam@nospam.com> wrote in message
> news:uIXMdYWQGHA.4264@TK2MSFTNGP11.phx.gbl...
>
> Thanks for the response. I can't seem to find this browser setting. Is it
> exposed in Tools|Options? Would you mind pointing me to it?
>
> Thx.
> PJ
>
>
>
>

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com