Password saves not working with IE6 installed on a XP Professional

[Guest]

RE: Password saves not working with IE6 installed on a XP Professional
workstation.

I have a perplexing problem with the password save feature of IE6 under the
XP professional operating system.
In windows 2000 I was able to log into web sites with IE6 and have the
computer remember my username and passwords.
We now use XP professional, IE6 will remember the username but will not
store the password.
The only exception is when we log into SSL sites, and then XP will remember
both the username and password.

We think we have tried everything:
1. Removing the Protected Storage System Provider registry key.
2. Checking all the selections in the Auto complete area of internet options.

We have web sites on servers (windows 2000) and personal web sites on XP
professional workstations.

We found an article about autocomplete for windows 2000, but the article
(http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q306895) suggests we
re-register RSABase.dll, but I was unable to find this file in any of our XP
professional workstations. We ran sfc /scannow to determine if RSABASE was
missing, but sfc found no errors and none of our workstations have this DLL.
Another article suggested that rsaenh.dll is the replacement for rsabase and
that it could be corrupt. But we are having problems on ten new XP
professional machines (laptop and desktops); the majority are new machines
with factory installed operating system, so this does not make sense.

Protected storage passview (http://www.nirsoft.net/utils/pspv.html) does
not show the non-SSL URL’s , but it does show the SSL sites and their
password.

Our XP workstation IE6 login screens are unable to store the password for
any non-SSL site.

On the Windows 2000 workstations we still use, IE6 in these machines will
store both username and password.



All XP professional service packs are installed.
IE6 is the browser we use.
This problem only occurs with non-SSL sites ( Email and other SSL sites work
fine). We can connect to other drives and XP professional will remember the
password to get to that remote shared drives.

I notice that when I go to 'manage my network accounts passwords' under
'stored usernames and passwords' that the URLs are there, but this area will
not store passwords.

The only time internet explorer 6 will store a password is when the site is
under SSL.

Does anyone have any idea of why this may be happening? Is XP professional
now designed to not store non-SSL website passwords?

Thanks

 

[PA Bear]

Q(KB)306895 applies to IE5.x.

How's your German? The following KB article might pertain (disregard the
mention of OE) but the English-language version has been pulled recently:

OLEXP: In Windows 2000 oder XP wird Ihr Outlook Express-Kennwort nicht
gespeichert:
http://support.microsoft.com/kb/264672/de

Literal translation:
http://babelfish.altavista.com/babe...url=http://support.microsoft.com/kb/264672/de

 

[Guest]

Q(KB)306895 applies to IE5.x.

How's your German? The following KB article might pertain (disregard the
mention of OE) but the English-language version has been pulled recently:

OLEXP: In Windows 2000 oder XP wird Ihr Outlook Express-Kennwort nicht
gespeichert:
http://support.microsoft.com/kb/264672/de

Literal translation:
http://babelfish.altavista.com/babe...url=http://support.microsoft.com/kb/264672/de

--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE) & Security


Thanks Robear Dyer , but we tried that. I work at a University and we have monthly meetings where 40 members log into a web site. We track each user and log which documents they review. When they were running Windows 2000, the username, password login screen saved the password. When we all switched to XP, we all lost the "remember the password" feature.

We have a lot of XP machines, many right out of the box and none of them can
keep the password on a non-ssl site. Email works without a problem, but this
is probably because it is an SSL site.

One option was to make the web site a trusted site, passwords would not be
needed in this case. But since members could use each other's compute, we
lost the ability to know who actually loged in and read the documents on the
site. The other option was to make all servers, ssl servers. When found that
when SSL was installed and used, the "remember the password" feature
returned.

But thank you for reviewing.

Al

 

[PA Bear]

We have a lot of XP machines, many right out of the box and none of them
can
keep the password on a non-ssl site. Email works without a problem, but
this
is probably because it is an SSL site.

One option was to make the web site a trusted site, passwords would not be
needed in this case. But since members could use each other's compute, we
lost the ability to know who actually loged in and read the documents on
the
site. The other option was to make all servers, ssl servers. When found
that when SSL was installed and used, the "remember the password" feature
returned.

But thank you for reviewing.

YW. If I come across something else, I'll reply to this thread.

 

[Robert Aldwinckle]

....

We found an article about autocomplete for windows 2000, but the article
(http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q306895) suggests we
re-register RSABase.dll, but I was unable to find this file in any of our XP
professional workstations. We ran sfc /scannow to determine if RSABASE was
missing, but sfc found no errors and none of our workstations have this DLL.
Another article suggested that rsaenh.dll is the replacement for rsabase and
that it could be corrupt.

Link please? The first part is correct. rsabase.dll was used when US
export restrictions were in effect which prevented IE from using 128-bit
Cipher strength. IE6 was produced after this restriction was dropped
and uses rsaenh.dll instead. XP came out after that with IE6 as a base
for browser support. Hence XP doesn't need rsabase.dll at all.

rsaenh.dll has an entry point called DllRegisterServer so you could
try re-registering it. Perhaps it will have whatever effect on your
symptom that re-registering rsabase.dll was supposed to.


I suggest also the suggestions and re-registrations included in this article.
Notice that re-registering rsaenh.dll is just a small subset of its repair
procedure.

<title>KB813444 - How to troubleshoot situations where you cannot
complete MSN sign-up or connect to SSL secured (128-Bit) Web sites
by using Internet Explorer in Windows XP</title>


Good luck

Robert Aldwinckle
---

 

[Guest]

Robert,

Thank you very much for your suggestion and I will try the page you suggested.

Unfortunately , the problem for us is not SSL sites, but non-SSL sites. On
the SSL sites the "remember my password" function works well.

On non-SSL sites, with all the new XP Professional machines that our members
now have, the "remember my password" function does not appear to work. I
could understand a problem with the DLL's on one machine, but it appears that
40 XP client members are unable to use the "remember my password" function so
I am beginning to think this is a bigger problem than just a corrupt DLL. We
have a few people who have window 2000 workstations and when they log into
our servers, the "remember the password" function works for them.

We have set up a few web sites on XP Professional workstations to see if
this problem was local to our servers,. It looks like all IE6 clients that
access our non-SSL web sites (password protected using integrated NTFS
authenication) on servers or on XP workstations with IIS will not have the
"remember the password" function working correctly.

I think I will have to investigate how the "remember the password" functions
works and possibly call Microsoft to see if this is a design problem or
function.

Thank you again for your suggestion.

Al

 

[Guest]

It looks like my DBA has found a work around for this problem. I had assumed
that installing a SSL certificate on a workstation or a server would have
been sufficient to return the 'Remember my password' function. This was not
the case, I had to also remove the 'Integrated Windows Authentication'
checkmark in the directory security section.

Basic authentication with SSL then becomes the method of authenticating to
the web site, but you get the 'Remember my password' function back. I would
think that basic authentication with SSL would be comparable to 'Integrated
Windows Authentication' but I probably would only use this method for low
security websites.

Does anyone know why 'Integrated WIndows authentication' would cause the
'Remember my password' function to stop working?

Al