M
Mr. Grinch
Environment: Windows 2000 Server, SP3, Terminal Services, Citrix MF XP
FR2, and mandatory profiles, IE 6 sp1, all critical updates.
Here's the deal using normal roaming Network profiles. Go to a web site
with a form to log in with your user ID and password. IE saves the user
name and password you use to log into a site. Log off, log on, it's
saved, and when you go to log into the web site, you type in your ID.
Autocompletion fills in the password. All works as it should.
Now, try mandatory profiles. We back up and restore everthing using
profile wizard in logon / logoff scripts. The user logs in to the
website the first time, and types in their password. Close IE, start it
again, and log in again, IE remembers the password and fills it in with
autocomplete.
Backup the profile keys in question using proflwiz, log off, log back in
again, re-load profile settings using proflwiz. Start IE. Go to the web
site. Now type in the user ID. IE fails to fill in the password.
We've compared the current user registry before and after a sucessful set
of this function, which led us to find the setting of the ProtectedRoot
key and IntelliForms key, where the pw is saved encrypted. We make sure
these keys are loaded correctly, but still, it doesn't work. We go
through the process manually, by logging in the user again and saving the
pw, but soon as user logs out and back in again, autocomplete fails
again.
Diffs of the local user reg key before and after show nothing that we are
not setting already, although the protectedroot key is strange. Setting
a password on a site updates this key, but you can delete the key and
autocomplete of pw to this site will still work.
Again, we've made sure the intelliforms key is saved and re-loaded
exactly the same, but no luck.
Testing a "normal" profile, We've deleted everything in the user profile
with the exception of the ntuser.dat and log, and still autocomplete of
the user password will work. So you can delete everything, cache,
cookies, history, etc, all except the ntuser.dat and log, and still the
autocomplete for the password of a site will still work.
I've no idea what's going on here... very strange. Something is
happening in the current user registry but comparing exported registries
we don't see what it is, other than the obvious keys in ProtectedRoot and
Intelliforms SPW.
We ran regmon to compare a working and non-working config. A working
profile reads the autocomplete function key to see if it's on or not,
then goes straight to the intelliforms key to see if the password is
there, then logs in.
A non-working profile reats the autocomplete function key (turned on) and
even though it see's it's turned on, it stops there. It never goes to
the intelliforms key to try and read the password stored there and log
in.
Ideas appreciated. This one has us stumped. We're trying to use
mandatory profiles woth proflwiz to save user settings in their home
drive, to further eliminate any chanceof profile corruption causing
issues.
FR2, and mandatory profiles, IE 6 sp1, all critical updates.
Here's the deal using normal roaming Network profiles. Go to a web site
with a form to log in with your user ID and password. IE saves the user
name and password you use to log into a site. Log off, log on, it's
saved, and when you go to log into the web site, you type in your ID.
Autocompletion fills in the password. All works as it should.
Now, try mandatory profiles. We back up and restore everthing using
profile wizard in logon / logoff scripts. The user logs in to the
website the first time, and types in their password. Close IE, start it
again, and log in again, IE remembers the password and fills it in with
autocomplete.
Backup the profile keys in question using proflwiz, log off, log back in
again, re-load profile settings using proflwiz. Start IE. Go to the web
site. Now type in the user ID. IE fails to fill in the password.
We've compared the current user registry before and after a sucessful set
of this function, which led us to find the setting of the ProtectedRoot
key and IntelliForms key, where the pw is saved encrypted. We make sure
these keys are loaded correctly, but still, it doesn't work. We go
through the process manually, by logging in the user again and saving the
pw, but soon as user logs out and back in again, autocomplete fails
again.
Diffs of the local user reg key before and after show nothing that we are
not setting already, although the protectedroot key is strange. Setting
a password on a site updates this key, but you can delete the key and
autocomplete of pw to this site will still work.
Again, we've made sure the intelliforms key is saved and re-loaded
exactly the same, but no luck.
Testing a "normal" profile, We've deleted everything in the user profile
with the exception of the ntuser.dat and log, and still autocomplete of
the user password will work. So you can delete everything, cache,
cookies, history, etc, all except the ntuser.dat and log, and still the
autocomplete for the password of a site will still work.
I've no idea what's going on here... very strange. Something is
happening in the current user registry but comparing exported registries
we don't see what it is, other than the obvious keys in ProtectedRoot and
Intelliforms SPW.
We ran regmon to compare a working and non-working config. A working
profile reads the autocomplete function key to see if it's on or not,
then goes straight to the intelliforms key to see if the password is
there, then logs in.
A non-working profile reats the autocomplete function key (turned on) and
even though it see's it's turned on, it stops there. It never goes to
the intelliforms key to try and read the password stored there and log
in.
Ideas appreciated. This one has us stumped. We're trying to use
mandatory profiles woth proflwiz to save user settings in their home
drive, to further eliminate any chanceof profile corruption causing
issues.