I run a web site (ASP) on the company intranet which I want to restrict
access to. A logon box is necessary since some computers are logged on
with "common" profiles.

Using IIS 6, I have set authentication method to Digest Auth which
communicates with Active Directory as wanted. I've remove anonymous
access and integrated Win auth. I've also set connection timeout to 30
seconds.

My problem is this:
1) User A successfully logs on to the site using his/hers network
password
2) User A leaves the computer without closing ALL Internet Explorer
windows
3) User B enters the site. The login box is pre-filled with user A's
username/password. User B only needs to click OK to enter the site.

I've tried changing the login settings under Authentication in IE, but
this doesn't help.

Is there a way to (preferably programmatically) clear the username and
password for the logon box?

Re: How to programmatically clear network passwords from IE by ocb

ocb
Tue Sep 26 08:36:36 CDT 2006

Sorry for the multiple posts. Problems with the company firewall it
seems.


Re: How to programmatically clear network passwords from IE by GregKirkpatrick

GregKirkpatrick
Tue Sep 26 10:05:02 CDT 2006

Sounds like this is coming from AutoComplete.

In Internet Options, click Content / AutoComplete. Uncheck the boxes there,
and click the Clear Forms and Clear Passwords buttons.

This can, of course, be controlled by Group Policy.

Re: How to programmatically clear network passwords from IE by ocb

ocb
Tue Sep 26 17:10:21 CDT 2006

Thanks for the reply.

The only autocomplete feature currently enabled, is for web addresses.
I've tried clearing the forms and passwords, but still the username and
password are pre-filled in the login box.

Is there a way to change a Group policy temporarily? Since "my" server
is only one of many in the corporate domain, I'm guessing it would be
hard to convince the corporate network admins to change the policy or
make a custom one for me (and the 50+ people potentially using the
specific intranet site).