We are trying to disable the "remember password" option in Outlook 2007 and Outlook 2010 across our organization because our users keep forgetting their passwords..and when it comes time to change thier passwords (every 90 days) we get in influx of tickets for resets because users don't recall what their old password is.

We figure, we can take this option away from the end-user, thereby forcing them to enter the password in daily.  I know how to disable this feature in the program itself (in email options under security there is an option to "always ask for password") but the users will just find a way to re-enable this option.

Does anyone know of a way, through a script, that will disable this feature in Outlook 2007 and 2010, or at least set the default to "always ask for password"?

I have searched through the registry settings, and haven't found anything so far.  If I could find a corresponding registry key for this, I would just save the registry key to a network drive with the settings we want, then automate a regsvr32 that will import it into the end-users registry.

Does anyone know where this registry key would be located?  I've googled until I'm sick, no help there.  Any ideas are greatly appreciated.

Answer Summary:
Add the 'Security" key and "PromptForCredentials" value to the registry with the following command: reg.exe add "HKCU\Software\Policies\MicroSoft\Office\12.0\Outlook\Security" /v PromptForcredentials /t REG_DWORD /d 1 /f
Cancel
2 Comments   [ + ] Show Comments

Comments

  • I tried this on both Outlook 2007 and 2010 and it doesn't seem to work. The command does create the desired key, however, users still have the option to remember password.
  • Tried the "creating key" option which does not seem to work in Outlook 2007 or 2010. I'm using Windows 7 Pro. The command does create the desired key, however, all users still have the option to select "save the password in your password list."
Please log in to comment

Community Chosen Answer

2

see if this helps

http://superuser.com/questions/444497/force-outlook-2010-to-ask-for-credentials-via-group-policy

Answered 02/04/2013 by: SMal.tmcc
Red Belt

  • Thanks for the reply, but I found that earlier and I don't have the "security" key under the version of outlook, so there is no "PromptForCredentials" key to modify.
  • Did you try to create the upper key and it's subsets to see if it works any way?
    reg.exe add "HKCU\Software\Policies\MicroSoft\Office\14.0\Outlook\Security" /v PromptForcredentials /t REG_DWORD /d 1 /f
    • for 2007 should be
      reg.exe add "HKCU\Software\Policies\MicroSoft\Office\12.0\Outlook\Security" /v PromptForcredentials /t REG_DWORD /d 1 /f
      • This content is currently hidden from public view.
        Reason: Removed by member request
        For more information, visit our FAQ's.
      • I will try adding the key and subkeys
      • Ok, so that actually worked. Thank you, I will begin throwing together my script now that I have a key available to import to my end-users.

        I really appreciate the response.
Please log in to comment

Answers

0
Open Outlook
Click "Tools > Account Settings"
Under the "Email" tab, double-click your email account. click More settings, in that select security tab. Under 'user identification' select the check box 'always prompt for logon credentials'
Click "Next"
Click "Finish".

After that everytime you need to provide a logon credentials for login.

Rgds,
Vigesh
Answered 06/25/2014 by: vigesh
White Belt

Please log in to comment
0

I found the subkey responsible, see below;

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging
Subsystem\Profiles\Outlook\13dbb0c8aa05101a9bb000aa002fc45a]

Below the profile GUID, a subkey named 00036601 has a REG_BINARY value that determines whether the user is prompted or not.
A value of 04 10 00 00 indicates that the user will not be prompted for credentials.
A value of 0C 10 00 00 indicates that the user will be prompted for credentials.

 

However, I cannot import a subkey without importing the entire key...which will change the outlook server settings for my end-users...so this is not a viable option to push out to an organization

Answered 02/04/2013 by: Strangeronfire
Senior Yellow Belt

  • This content is currently hidden from public view.
    Reason: Removed by member request
    For more information, visit our FAQ's.
  • should be
    reg.exe add "HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging
    Subsystem\Profiles\Outlook\13dbb0c8aa05101a9bb000aa002fc45a]" /v 00036601 /t REG_BINARY /d 0C 10 00 00 /f
    • Both of your answers are viable solutions to the issue. I have tested them both independently and either way will work. I am opting for creating the subkeys for PromptForCredentials and setting the REG_DWORD to 1.

      I really REALLY appreciate your help. It will help our support staff immensely.
      • this can be pushed as a GPO or with a KIX script, or even in the login script.
      • I'll be using kbox to push this registry key to all users, by first creating one for outlook 2007 and then one for 2010 and pushing them both to all machines.
  • you will need an online script or use active setup for a offline script
    http://www.itninja.com/blog/view/active-setup.
  • If you use a VBScript file to change the registry setting you can call out just the bit that needs changed. I struggled with a bunch of Hooey for 8 years to find how to change the binary key. People were saying you have to import the key then disect it then re-write it. 8 years later an India Indian told me all you have to do is call out that portion.

    Here is a snippet from my script where I did this for Auto Detect Settings

    Sub AutoDetectSettings
    strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections"
    strValue = "DefaultConnectionSettings"

    'Retrieve the current settings.
    objReg.GetBinaryValue HKEY_CURRENT_USER, strKeyPath, strValue, binValue

    ' Remove Checkmark from "Automatically detect settings" and turn on checkmark
    ' for Use Automatic Configuration Script box.
    binValue(8) = 05
Please log in to comment
0

>I am opting for creating the subkeys for PromptForCredentials
...in which case, forget script and do this via Group Policy. There's no way around it, then.

Answered 02/06/2013 by: VBScab
Red Belt

Please log in to comment
0

 

Click Tools -> Select Options -> Setup tab and then click “Email Accounts”.

Click on “View or change existing e-mail accounts” and click “Next”. Click on the account and then click ‘Change’. Uncheck the mark next to remember password and click Next and then OK.

Regards

Sarah

 

Answered 02/19/2013 by: sarahsmith
White Belt

  • Thank you for the response, but I was looking for a way to automate this across an organization and I figured out how.
Please log in to comment
Answer this question or Comment on this question for clarity