Groups | Blog | Home
all groups > iis security > march 2006 >

iis security : Remember My Password checkbox


P James
3/6/2006 1:30:30 PM

Hi,

I have a website that requires basic authentication. Is there a way I can
prevent users of my site from seeing and having the option to check the
Remember My Password checkbox?

Thanks,
PJ


Leon Mayne
3/6/2006 9:37:04 PM
[quoted text, click to view]

No, it's a browser setting, and you can't control it server side.

P James
3/7/2006 9:36:09 AM

[quoted text, click to view]

Thanks for the response. I can't seem to find this browser setting. Is it
exposed in Tools|Options? Would you mind pointing me to it?

Thx.
PJ


Leon Mayne
3/8/2006 6:55:18 PM
[quoted text, click to view]

Sorry, I should have said it's a feature of a browser and not a setting. As
far as I know in IE you can't disable it. Perhaps there is something in
group policy that you can use to remove it, but I don't know of any such
setting.

Keith
3/19/2006 10:55:27 AM
No. And to be honest, I would reconsider basic authentication as it just
encodes passwords ... not encrypts them.

However, if you're using ASP.Net perhaps you can switch to Forms based
authentication and save yourself a lot of concern about people checking to
remember the password:

http://www.4guysfromrolla.com/webtech/110701-1.shtml

Though you'll still not be encrypted.

[quoted text, click to view]
Keith
3/19/2006 12:20:28 PM
True, but the bigger concern is having that password hashed in the registry
where there's no intuitive way to remove it. Most people use corporate
domain credentials and don't like this occuring. In any scenario, 2-way
authentication by using a username/password and RSA badge or one-time passes
are great ... but not economical.

[quoted text, click to view]
Leon Mayne
3/19/2006 8:12:38 PM
[quoted text, click to view]

They could still use a browser password manager to 'remeber' their details
though.

Nancy R
3/21/2006 6:22:30 AM
Hi,

Try the instructions in this article:

http://support.microsoft.com/kb/q229940/

They are for IE 5.5 but worked great on IE 6.0 in our office.

Nancy

[quoted text, click to view]
AddThis Social Bookmark Button