/build/static/layout/Breadcrumb_cap_w.png

Disable "remember password" option in Outlook

We are trying to disable the "remember password" option in Outlook 2007 and Outlook 2010 across our organization because our users keep forgetting their passwords..and when it comes time to change thier passwords (every 90 days) we get in influx of tickets for resets because users don't recall what their old password is.

We figure, we can take this option away from the end-user, thereby forcing them to enter the password in daily.  I know how to disable this feature in the program itself (in email options under security there is an option to "always ask for password") but the users will just find a way to re-enable this option.

Does anyone know of a way, through a script, that will disable this feature in Outlook 2007 and 2010, or at least set the default to "always ask for password"?

I have searched through the registry settings, and haven't found anything so far.  If I could find a corresponding registry key for this, I would just save the registry key to a network drive with the settings we want, then automate a regsvr32 that will import it into the end-users registry.

Does anyone know where this registry key would be located?  I've googled until I'm sick, no help there.  Any ideas are greatly appreciated.


2 Comments   [ + ] Show comments
  • I tried this on both Outlook 2007 and 2010 and it doesn't seem to work. The command does create the desired key, however, users still have the option to remember password. - skilled 9 years ago
  • Tried the "creating key" option which does not seem to work in Outlook 2007 or 2010. I'm using Windows 7 Pro. The command does create the desired key, however, all users still have the option to select "save the password in your password list." - skilled 9 years ago

Answers (5)

Answer Summary:
Add the 'Security" key and "PromptForCredentials" value to the registry with the following command: reg.exe add "HKCU\Software\Policies\MicroSoft\Office\12.0\Outlook\Security" /v PromptForcredentials /t REG_DWORD /d 1 /f
Posted by: SMal.tmcc 11 years ago
Red Belt
2

see if this helps

http://superuser.com/questions/444497/force-outlook-2010-to-ask-for-credentials-via-group-policy


Comments:
  • Thanks for the reply, but I found that earlier and I don't have the "security" key under the version of outlook, so there is no "PromptForCredentials" key to modify. - Strangeronfire 11 years ago
  • Did you try to create the upper key and it's subsets to see if it works any way?
    reg.exe add "HKCU\Software\Policies\MicroSoft\Office\14.0\Outlook\Security" /v PromptForcredentials /t REG_DWORD /d 1 /f - SMal.tmcc 11 years ago
    • for 2007 should be
      reg.exe add "HKCU\Software\Policies\MicroSoft\Office\12.0\Outlook\Security" /v PromptForcredentials /t REG_DWORD /d 1 /f - SMal.tmcc 11 years ago
      • I will try adding the key and subkeys - Strangeronfire 11 years ago
      • Ok, so that actually worked. Thank you, I will begin throwing together my script now that I have a key available to import to my end-users.

        I really appreciate the response. - Strangeronfire 11 years ago
Posted by: vigesh 9 years ago
White Belt
0
Open Outlook
Click "Tools > Account Settings"
Under the "Email" tab, double-click your email account. click More settings, in that select security tab. Under 'user identification' select the check box 'always prompt for logon credentials'
Click "Next"
Click "Finish".

After that everytime you need to provide a logon credentials for login.

Rgds,
Vigesh
Posted by: Strangeronfire 11 years ago
Senior Yellow Belt
0

I found the subkey responsible, see below;

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging
Subsystem\Profiles\Outlook\13dbb0c8aa05101a9bb000aa002fc45a]

Below the profile GUID, a subkey named 00036601 has a REG_BINARY value that determines whether the user is prompted or not.
A value of 04 10 00 00 indicates that the user will not be prompted for credentials.
A value of 0C 10 00 00 indicates that the user will be prompted for credentials.

 

However, I cannot import a subkey without importing the entire key...which will change the outlook server settings for my end-users...so this is not a viable option to push out to an organization


Comments:
  • should be
    reg.exe add "HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging
    Subsystem\Profiles\Outlook\13dbb0c8aa05101a9bb000aa002fc45a]" /v 00036601 /t REG_BINARY /d 0C 10 00 00 /f - SMal.tmcc 11 years ago
    • Both of your answers are viable solutions to the issue. I have tested them both independently and either way will work. I am opting for creating the subkeys for PromptForCredentials and setting the REG_DWORD to 1.

      I really REALLY appreciate your help. It will help our support staff immensely. - Strangeronfire 11 years ago
      • this can be pushed as a GPO or with a KIX script, or even in the login script. - SMal.tmcc 11 years ago
      • I'll be using kbox to push this registry key to all users, by first creating one for outlook 2007 and then one for 2010 and pushing them both to all machines. - Strangeronfire 11 years ago
  • you will need an online script or use active setup for a offline script
    http://www.itninja.com/blog/view/active-setup. - SMal.tmcc 11 years ago
  • If you use a VBScript file to change the registry setting you can call out just the bit that needs changed. I struggled with a bunch of Hooey for 8 years to find how to change the binary key. People were saying you have to import the key then disect it then re-write it. 8 years later an India Indian told me all you have to do is call out that portion.

    Here is a snippet from my script where I did this for Auto Detect Settings

    Sub AutoDetectSettings
    strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections"
    strValue = "DefaultConnectionSettings"

    'Retrieve the current settings.
    objReg.GetBinaryValue HKEY_CURRENT_USER, strKeyPath, strValue, binValue

    ' Remove Checkmark from "Automatically detect settings" and turn on checkmark
    ' for Use Automatic Configuration Script box.
    binValue(8) = 05 - dondreak 10 years ago
Posted by: anonymous_9363 11 years ago
Red Belt
0

>I am opting for creating the subkeys for PromptForCredentials
...in which case, forget script and do this via Group Policy. There's no way around it, then.

Posted by: sarahsmith 11 years ago
White Belt
0

 

Click Tools -> Select Options -> Setup tab and then click “Email Accounts”.

Click on “View or change existing e-mail accounts” and click “Next”. Click on the account and then click ‘Change’. Uncheck the mark next to remember password and click Next and then OK.

Regards

Sarah

 


Comments:
  • Thank you for the response, but I was looking for a way to automate this across an organization and I figured out how. - Strangeronfire 11 years ago

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

View more:

Share

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ