When users on our Server 2008 R2 remote desktop server get an enforced password change prompt, it clears their password vault in the process. I don't seem to have this problem anywhere else. This server was in the care of another provider so
I'm not positive it's not just a policy hidden somewhere - this is not managed on a domain.
Dustin Collett

There is an amazing pack of free network admin tools. click here to download it

Hi,

Do you mean Always prompt for password upon connection Policy?

The full path of this node in the Group Policy Management Console is Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security.

Specifies whether Remote Desktop Services always prompts the client for a password upon connection.
You can use this setting to enforce a password prompt for users logging on to Remote Desktop Services, even if they already provided the password in the Remote Desktop Connection client.
By default, Remote Desktop Services allows users to automatically log on by entering a password in the Remote Desktop Connection client.
If the status is set to Enabled, users cannot automatically log on to Remote Desktop Services by supplying their passwords in the Remote Desktop Connection client. They are prompted for a password to log on.
If the status is set to Disabled, users can always log on to Remote Desktop Services automatically by supplying their passwords in the Remote Desktop Connection client.
If the status is set to Not Configured, automatic logon is not specified at the Group Policy level. However, an administrator can still enforce password prompting by using the Remote Desktop Session Host Configuration tool.


Hope this helps!

Best Regards
Elytis Cheng
Elytis Cheng
TechNet Community Support

Need to support users over the internet? click here try our remote control online beta

Thank you for taking the time to think about my problem. The prompt for Outlook Exchange password over HTTP is only an issue after the system password has been changed for that user - every 90 days or so. It saves it and behaves normally until that
login password which is completely separate from the exchange is changed. If you run 'control keymgr.dll' all the saved passwords seem to be cleared.

Thanks AgainDustin Collett

There is an amazing pack of free network admin tools. click here to download it

Hi,

I'd like to confirm there is no problem to logon to the computer with the change password.

According to your description, I understand that: Domain joined users with mailbox on Exchange server are getting authentication prompt while logging in Outlook after change their password? If there is anything misunderstanding, please feel free to let
me know.

This issue may occur when you are currently using Basic authentication for Outlook Anywhere.

Please try to perform the following steps:

Enable NTLM to reduce the number of times users will be prompted for a password while using Outlook Anywhere.

However, please be aware its not 100% bulletproof in terms of preventing a password prompt for a user.


Depending on a variety of circumstances, the 3-way hash can be received out of sequence, resulting in a password prompt. This is more likely to occur when the user is logged on outside the corporate network, but it sounds like youre seeing it happen INSIDE
the network as well. NTLM should greatly reduce the number of instances where this happens.

Set-OutlookAnywhere -Name ServerName DefaultAuthenticationMethod NTLM

If the issue persist, please visit exchange and outlook forum to get a better resolution:

Exchange Server Forum

http://social.technet.microsoft.com/Forums/en-US/category/exchangeserver/


Outlook IT Pro Discussions

http://social.technet.microsoft.com/Forums/en-US/outlook/threads


Hope this helps!

Best Regards
Elytis Cheng
Elytis Cheng
TechNet Community Support

There is an amazing pack of free network admin tools. click here to download it

Hi,

I'd like to confirm there is no problem to logon to the computer with the change password.

According to your description, I understand that: Domain joined users with mailbox on Exchange server are getting authentication prompt while logging in Outlook after change their password? If there is anything misunderstanding, please feel free to let
me know.

This issue may occur when you are currently using Basic authentication for Outlook Anywhere.

Please try to perform the following steps:

Enable NTLM to reduce the number of times users will be prompted for a password while using Outlook Anywhere.

However, please be aware its not 100% bulletproof in terms of preventing a password prompt for a user.


Depending on a variety of circumstances, the 3-way hash can be received out of sequence, resulting in a password prompt. This is more likely to occur when the user is logged on outside the corporate network, but it sounds like youre seeing it happen INSIDE
the network as well. NTLM should greatly reduce the number of instances where this happens.

Set-OutlookAnywhere -Name ServerName DefaultAuthenticationMethod NTLM

If the issue persist, please visit exchange and outlook forum to get a better resolution:

Exchange Server Forum

http://social.technet.microsoft.com/Forums/en-US/category/exchangeserver/


Outlook IT Pro Discussions

http://social.technet.microsoft.com/Forums/en-US/outlook/threads


Hope this helps!

Best Regards
Elytis Cheng
Elytis Cheng
TechNet Community Support

Need to support users over the internet? click here try our remote control online beta