|
| |
| MS Windows 95 |
|
|
|
      
Password Bug in Windows for Workgroups & Win 95
Service Packs
OEM Service Release 2
(OSR 2)
These updates are intended to provide support for new and emerging hardware. Because
most of the new functionality in OSR 2 is applicable only to new hardware devices, OSR 2
is only available on new PCs. However, here are the OSR 2 components available for
download from the Internet today!
Internet Connection Wizard
Microsoft Internet Explorer 3.0
Personal Web Server
Internet Mail and News
NetMeeting
DirectX 2.0 (including Direct3Dä)
ActiveMovie
ISDN Accelerator Pack 1.1
Unimodem V (Support for Voice Modems
MSN 1.3
Wang Imaging for Windows 95
Fixes/Updates
Power Toys - www.microsoft.com/windows/software/PowerToy.htm
. |
|
E.27. How to kill Windows' dubious "password caching feature"?
Date: Fri, 29 Dec 1995 21:00:00 -0800
From: Rich Graves <win95netbugs-owner@lists.stanford.edu>
By default, Windows stores all network and dialup passwords in world-readable .PWL
files. Even if Microsoft successfully resolves the serious
.PWL encryption bugs that make password storage totally insecure (which they have
promised to do for Win95, but not for Windows for Workgroups), this default "password
caching" behavior is inappropriate for many sites.
To turn it off for Windows for Workgroups, add the following to SYSTEM.INI [Credit Jim
Carlson]:
[NETWORK]
passwordcaching=no
To turn it off for Win95, you can use Policy Editor, or edit the following Registry
entry directly:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\
Network\DisablePwdCaching
This gets a binary value of 1 [Credit Malcolm G. Miles].
Here's a simple RegEdit script to accomplish the above. Save it as NOCACHE.REG and run
it from either DOS (in a network login script, for example) or Windows.
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Network]
"DisablePwdCaching"=dword:00000001
Note that there are *three* nonblank lines. The second nonblank line ends with the
right bracket and the third starts with the double quote; what you're seeing is *not* a
line broken at column 80. |
|
|
   
Disclaimer: We do not hold any responsibility or creative control over
the contents of the web sites and documents referenced by our links. They solely express the
opinions of their respective authors and not Ugenie PCS. Items and information are
provided as links because they appear to have relevant content to topics presented on our
web site(s). Ugenie PCS does not continually verify the truthfulness or locations
of their contents. Ugenie PCS does not endorse, recommend, or guarantee any particular software.
Software and other items on these pages are provided as a service only and maybe copyrighted by their respective owners. Requests for
additions to, or removal from, this or other pages should be sent to Content
Management@CezWright.com.
Additionally
Disclaimer: We do not hold any responsibility or creative control over
the contents of the web sites and documents referenced by our links. They solely express the
opinions of their respective authors and not Ugenie PCS. Items and information are
provided as links because they appear to have relevant content to topics presented on our
web site(s). Ugenie PCS does not continually verify the truthfulness or locations
of their contents. Ugenie PCS does not endorse, recommend, or guarantee any particular software.
Software and other items on these pages are provided as a service only and maybe copyrighted by their respective owners. Requests for
additions to, or removal from, this or other pages should be sent to Content
Management@CezWright.com.
Additionally
Last
Edit: 2004-03-04 08:41 AM -0500
Auto Update: Saturday, August 20, 2005 12:29 PM -0400
|
|
