What are the credentials that Microsoft caches in the below directory? Application Data\Microsoft\Credentials\<User SID>\Credentials and [Windows Profile]\Local Settings\Application Data\Microsoft\Credentials\[User SID]\Credentials Also, if some uses RDP onto the a Windows 2003 Server, is the RDP password saved anywhere on the Server? I noticed a RDP file. I am afterr countermeasures to stop credentials being cached onto Windows Servers -- so if anyone has any advice to stop an RDP password being cached onto a Windows Server, plus what ever lives in the above directory, I am interested to know.

What are the credentials that Microsoft caches in the below directory? Application Data\Microsoft\Credentials\<User SID>\Credentials and [Windows Profile]\Local Settings\Application Data\Microsoft\Credentials\[User SID]\Credentials When you connect to the file system of another computer on your network (something like \\MyComp\MyFolder), Windows allows you to save the password. If you choose to save the password, the encrypted password is stored in a credential file. The credential file is stored in the following locations: Windows XP/2003: [Windows Profile]\Application Data\Microsoft\Credentials\[User SID]\Credentials and [Windows Profile]\Local Settings\Application Data\Microsoft\Credentials\[User SID]\Credentials Windows Vista: [Windows Profile]\AppData\Roaming\Microsoft\Credentials\[Random ID] and [Windows Profile]\AppData\Local\Microsoft\Credentials\[Random ID] Reference: http://www.nirsoft.net/articles/saved_password_location.html This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Also, if some uses RDP onto the a Windows 2003 Server, is the RDP password saved anywhere on the Server? I noticed a RDP file. I am afterr countermeasures to stop credentials being cached onto Windows Servers -- so if anyone has any advice to stop an RDP password being cached onto a Windows Server, plus what ever lives in the above directory, I am interested to know. There is no need so that the RDP password will be saved on the server. Are you sure that you have not launched a RDP connection from the server? If yes it is normal that the RDP file had been created on the server. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.