Hello Workstation is domain member with Windows 7 Enterprise. When I connecting via VPN with some credentials, it stores automatically in Credential Manager with "*Session" marker. When I connecting to network shares on domain servers, workstation use credentials, stored in Credential Manager. So, because stored credentials is different from domain user account, workstation can't connect to network shares in domain. When I manually remove stored "*Session" credentials, workstation connecting to domain servers OK. So I need to disable storing passwords from VPN connections in Credential Manager because it different from domain user account. P.S. I am already posted this question on "Windows 7 Security, Privacy, and User Accounts" forum, but no answers at all. May be here somebody can help me?

Hi, You can disallow the credential to be stored in the Credential Manager by setting the following registry entry to 1: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa Value Name: DisableDomainCreds Value Type: REG_DWORD Value: 1 Hope it helps.This posting is provided "AS IS" with no warranties, and confers no rights.

Hi Is there any policy in GPO in Windows 2008 R2 domain? Or it can only be disabled by registry key? (I know that I can write a script for users logon for setup this registry key)

Hi, You can disallow the credential to be stored in the Credential Manager by setting the following registry entry to 1: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa Value Name: DisableDomainCreds Value Type: REG_DWORD Value: 1 Yes! It's worked! Thank you

Hi, Glad that it helps. It seems there is no policy to configure this setting. You may have to write a script or create a custom administrative template to deploy the setting. Joson Zhou TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com This posting is provided "AS IS" with no warranties, and confers no rights.

I have found out how to disable the Domain Credentials in Windows 7 but am unable to disable the Generic Passwords, any Ideas?