0

We have a Windows 7 PC that is not joined to our enterprise domain (which I will call "domain"), and this PC has several local accounts. All of the PC's local accounts have a mapped network drive which uses a specific domain account, say, "domain\specialuser," that is used to access a network share that is in the domain.

Because of CA-DOJ policy, passwords for the local accounts on the machine must be changed every 30 days. Whenever the anyone's local password is changed however, Windows 7 promptly erases their stored credentials, even though we marked "Remember My Credentials" when mapping the drive. Furthermore, the password for the domain account used to access the network share is not changing.

Why is Windows 7 eradicating the mapping credentials? Shouldn't this not change? Is there some "secret" (i.e., I don't know about) policy setting that controls this behavior? Google search and SO/SU search turned up nothing but 'how to erase mappings...' not helpful.

  • Issues specific to corporate IT support and networks are not treated here. – harrymc Dec 14 '18 at 16:49
  • Do you enforce local policy restrictions on this stand-alone machine? ..And if so, do you enforce this setting in local policy? Network access: Do not allow storage of passwords and credentials for network authentication – thepip3r Dec 14 '18 at 16:50
  • @thepip3r No, that setting is not touched. The mappings seem to store just fine. Until the local account password expiration policy kicks in. At which point it kills their mappings as well. – David Mancini Dec 14 '18 at 17:04
  • 1
    @harrymc - Also, this isn't really a question about the "enterprise" or "corporate" part. I specifically said this machine is NOT on the domain. It is a one-off machine, with what I suspect is a Windows-7-born issue, not a corporate configuration issue. We use no GPO whatsoever on this machine, aside from the password policy, which is controlled directly from the machine itself, not from a "corporate" network. – David Mancini Dec 14 '18 at 17:19
  • 1
    How are the local passwords getting changed? Is the Reset Password functionality being used, or are the accounts being logged in and the passwords changed through the normal "Change Password" functionality? – Twisty Impersonator Dec 14 '18 at 18:41

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.