Windows XP Username and Passwords created by Telecom T3G card

Forums › Microsoft Windows › Windows XP Username and Passwords created by Telecom T3G card

leonc

10 posts

Wannabe Geek

#8725 25-Jul-2006 15:57

I am using a Telecom T3G card for remote access frmo my laptop (XP SP2). When the connection is made, the Username/Password pair (mobile@jamamobile/telecom) is cached for the duration of the session and can be viewed using CMDKEY.EXE /LIST (or CPanel, User Accounts, Advanced, Manage Passwords).

How can I prevent these credentials from being stored? I can delete them using CMDKEY /DELETE /RAS - but this is a workaround more than a solution.

Thanks

Jama

1420 posts

Uber Geek

Trusted

#42415 25-Jul-2006 16:05

Why would you want to prevent them from being stored, they are part of the DUN associated with the T3G card.

mobile@jamamobile is not a secret....

nzbnw

2374 posts

Uber Geek

Trusted

Spark NZ

#42416 25-Jul-2006 16:09

If it's not broken, don't fix it

.

Jama is right 'mobile@jamamobile is not a secret....'

leonc

10 posts

Wannabe Geek

#42418 25-Jul-2006 16:25

All I would like to know is if the creation of the cached paswords can be prevented - it has nothing to do with it being 'secret'. It has to do with re-establishing drive mappings where these credentials are being used instead of the domain ones - and I have proved that if these T3G usernames and passwords are deleted then drive mappings work fine. So, if they are not stored - then we can map the drives without any issues.

freitasm

BDFL - Memuneh
79291 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#42425 25-Jul-2006 17:02

I don't understand your question. The credentials are only used to connect to Telecom's cellular data network. They should have no influence on mapping drives, unles the target host is using the same username/password combination.

leonc

10 posts

Wannabe Geek

#42427 25-Jul-2006 17:12

There a re various MS KB articles discussing how to manage the username & passwords stored by authentication applications (in this case the T3G card as it was the last authentication application ot negotiate a username/password).

When you access a resource, the authentication package searches in Stored User Names and Passwords for the most specific credential that matches that resource. If one is found, it will be used by the authentication package without any interaction from you. If a credential is not found, an authentication error is returned to the program that attempted to access the resource. You are then prompted for your user name and password.

What happens is that when you try and acces a domain mapped drive, the authetication process looks in 'Stored usernames & Passwords' and attempts to use the T3G pair - and when this fails, the dialog box asking you to enter a valied set of credentials is presented.

Because users do not login to the domain once remote access has been established, they have not been validated against the domain - only the locally saved domain credentials at login time which are not used for remote resources - only local authentication. Now, when a remote resource is accessed, the 'Stored User Names and Passwords' is searched and of course it fails.

To circumvent all of this - it would be easiest not to store the T3G Stored User Name and Password pair at all.

freitasm

BDFL - Memuneh
79291 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#42429 25-Jul-2006 17:30

Ah... Makes sense then. But in this case it's a DUN related behaviour, not specific to T3G. It could be any DUN, couldn't it?

jpwise

590 posts

Ultimate Geek

Lifetime subscriber

#42535 26-Jul-2006 15:45

freitasm: Ah... Makes sense then. But in this case it's a DUN related behaviour, not specific to T3G. It could be any DUN, couldn't it?

I'm inclined to agree. That said, the network mappings, are they permanent mappings, or are they doing them after the connection has been established. If it's a route thing possibly just put a batch file/script on the desktop to map it. Using the /user option when mapping.

Jp.

Working for Service Plus - www.serviceplus.co.nz

Authorised Service Agent for Apple, BenQ, Sony, and Toshiba - warranty & non-warranty repairs.