0

How to disable credential storage of network shared folders in windows clients (maybe with a .reg key or GPO etc)? (auto-login network shared folders)

Reason: I have a "shared network folder" and I want hundreds of PCs to connect to it, but it is essential that each time a windows client accesses the shared network folder, enter the username and password. Windows can not store these credentials. So, i need to simplify the process.

I try this .reg key and doesn't work:

HKLM\system\currentcontrolset\control\lsa\disabledomaincreds to 1 

I try with this GPO and doesn't work:

Press Windows+R keys and type “gpedit.msc”. Hit Enter.
Navigate to the following location:
Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options
Double Click on the option:
“Network access: Do not allow storage of passwords and credentials for network authentication”.
Select the radio button which says “Enabled”.

I tried with this method and doesn't work:

Click Start >Run >type gpedit.msc
Check Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options
Check "Interactive Logon: Number of Previous Logins To Cache" (if value is set to 0 then cached credentials is disabled)

And these solutions are not suitable to be massively implemented:

Click Start > Run (or press Windows key + R) then type rundll32.exe keymgr.dll, KRShowKeyMgr

or this one:

net use \\server\fileshare /username:domain\user1
net use \\fileserver\fileshare /username:domain\user2

Note:

The PCs are not in a "domain" (they are in a WORKGROUP).

There is no firewall or other active security measure in Windows clients

4
  • Is this a domain joined computer? Each solution you reference is about cached credentials. Domain connected computers aren’t using cached credentials. What is it exactly you are trying to accomplish? What is your concern you are trying to solve? Feb 16, 2019 at 2:27
  • The caching is done on the computers that accessing the share, not on the server. The only way to invalidate their access is to change the password of the account used for accessing.
    – harrymc
    Feb 16, 2019 at 13:32
  • @Appleoddity Note: The PCs are not in a "domain" (they are in a "working group")
    – acgbox
    Feb 16, 2019 at 16:42
  • @ajcg Even though your computers are in a WORKGROUP they will still (in almost all cases) honor the GroupPolicy settings set via gpedit or the local policy editor. Manually creating the registry keys under \HKLM\Software\Policies will work as well. So don't be too quick to dismiss domain based solutions !
    – Tonny
    Feb 16, 2019 at 16:55

0

You must log in to answer this question.

Browse other questions tagged .