Credential manager to see credentials stored for all users?

Is there a way to see and manage credentials stored for all users on a server (we use 2008 R2) rather than just the user who logs on and uses credential manager (or the cmdkey command)? We have users using three terminal servers and some of them store
incorrect creds (wrong username or password), so would be good for myself as domain admin, if I could go to the servers myself, and remove any credentials that OTHER users have stored.

Hi
The cached credential are stored in a special location in the registry. (an example there;
http://msitpros.com/?p=1029)
I doubt you can manipulate the string directly as it's encrypted (possibly "salted" with the user token), but maybe their is some workaround that I don't know of. (edited; to erase it's surelly easily doable)
Regards, Philippe
Don't forget to mark as answer or vote as
helpful to help identify good information. ( linkedin endorsement never hurt too :o) )
Answer an interesting question ? Create a
wiki article about it!

Similar Messages

HELP needed on Remote Management set to allow access for all users

my mac mini snow leopard server runs in a data center and i use screen sharing to interact with it. i played with the sharing settings remotely yesterday and changed "allow access for" to all users. i was disconnected immediately and i couldn't logon again. i have no luck changing to other users. i don't want to make a special trip to the center to change it back to whatever it used to be. i can still use afp to connect but the screen sharing option is no longer available. what does "allow access for all users" mean anyway?
thanks!

As its name implies, allow access for all should allow any valid user account to access the server. I'm not sure why it's no longer working. It almost sounds like the ARDAgent crashed.
Either way there's a command-line interface to the ARD preferences:
/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/ki ckstart
man kickstart discusses the options, including examples of how to enable access for specific users.

Setting New Window and New Tab behavior in Safari for all users

I would like Firefox to open to the homepage I have set for our school district rather than seeing the tiles for all users.

hello mcdermk, you could have a look at this method in order to lock and deploy certain settings: http://kb.mozillazine.org/Locking_preferences
in order to set a custom new tab page, you can put this line into the mozilla.cfg file:
lockPref("browser.newtab.url", "www.example.com");

Adding a domain user to the admin role within the local user management breaks all metro apps for all users!!

Hi,
I have posted this in another large thread under the "Windows 8 General" group but have not had any appropriate feedback from MS.
After hours of testing and working with other users I have managed to isolate a simple situation that breaks all metro ui applications within Windows 8 for all users on the machine. Here are my exact steps and notes.
Before continuing if you are running Avast then your solution may be to turn of the behaviour shield functionality as this also breaks metro apps. This is NOT the problem we are having!
I have performed 3 cleans installs after isolating the problem and am able to reproduce the issue every time using the same steps on two different machines.
First thing to say is that for us it has nothing to do with simply joining the domain, domain/group policies nor does it appear to have anything to do with the software we installed, the problem here is much more simple but the result is pretty terrible.
Here are my exact steps of what I did to reproduce our problem:
Complete format of HDD in preperation for a clean install
Clean install performed
Set up the machine initially with a local account
Test metro apps - all working fine
Open control panel from the desktop, click on System, change the system to join the domain, click reboot
Log into the system using my domain account
Test metro apps - all working fine
Here's were the problem starts. I need my domain account to have admin rights on the local machine so I can install programs without the IT men having to come over and enter their password every 5 mins.
I go to control panel via the desktop and click on User Accounts. From with here I then click on "Manage User Accounts". This requires the IT guys to enter their details to give me access to such functionality. This is fine
In the dialog box that opens I can only see the local user that was initially created during setup. The "Group" for this local account shows as "Administrators" - Image included below (important to note that metro apps are working at this point)
I click add and then add my domain account - also giving it administrator access
Sign off or reboot to ensure the new security is applied
Sign back in to the domain account
Test metro - ALL BROKEN
Sign out
Sign in as local account
Test Metro - NOW ALL BROKEN FOR THIS USER ALSO
So as soon as I add my domain account to the local user accounts and set it as admin it breaks all metro apps for all users. This is on a totally clean install with nothing at all installed other than the OS.
Annoyingly if I go back and change the domain account to a standard user or if I totally remove the domain account from the local account management system the problem does not go away for either user. basically it is now permanently broken. The only fix I
could fathom was a full re install and not giving the domain user admin access to the local machine.
Screen one - this is the local user accounts window AFTER joining the domain and logging in with my domain account (All metro apps working at this point)
Screen 2: User accounts AFTER joining the domain and AFTER adding domain account to local user management (METRO BROKEN)
I have isolated my machine from all group policies so nothing like that is affecting me. Users I have spoken to in different companies have policies that automatically add users to the local user management. This means that metro apps break as
soon as they join the domain which leads them to wrongly think it is group policies causing the error. Once they isolate themselves from this they can reproduce following my steps.
Thanks

Hi Juke,
Thank you for the response and apologies for the delay in getting back to you. My machine was running a long task so I couldn't try your suggested solution.
I had already tried running the registry merge suggested at the top of the thread to no avail. I had not tried deleting the OLE key totally so I did that and the problem still exists. I will post all the errors I see in event viewer below. For
your info, since posting my initial comment I have sent out my steps to 7 different people and we can all reproduce the problem. This comes to 10 different machines (3 of them mine then the other guys) in 3 different businesses / domains. We see the same errors
in event viewer.
Under "Windows Logs" --> "Application" : I get two separate error events the first reads "Activation of app winstore_cw5n1h2txyewy!Windows.Store failed with error: The app didn't start. See the Microsoft-Windows-TWinUI/Operational log for additional
information." The second arrives in the log about 15 seconds after the first and reads "App winstore_cw5n1h2txyewy!Windows.Store did not launch within its allotted time."
Under "Windows Logs" --> "System" : I get one error that reads "The server Windows.Store did not register with DCOM within the required timeout."
Under "Applications And Services Logs" --> "Microsoft" --> "Windows" --> "Apps" --> "Microsoft-Windows-TWinUI/Operational" : I get one error that reads "Activation of the app winstore_cw5n1h2txyewy!Windows.Store for the
Windows.Launch contract failed with error: The app didn't start."
If you require any further information just let me know and I will provide as much as I can.
Thanks

Enable Enterprise Voice for all users excpet management

Hi,
I want to disable enterprise voice for all users except managers.
I want to do this through PowerShell.
Mashhour Faraj

Hi
Here is the command to list all the Enterprise voice enabled users
GET-CSUser | Where { $_.EnterpriseVoiceEnabled }
Get-CsADUser -OU "OU=Test,dc=contoso,dc=com" | Disable-CsUser -RegistrarPool pool1.contoso.com -SipAddressType FirstLastName
To Disable all Enterprise voice Enabled users
$GetUsers=get-CsUser -Identity "* *" -OU "OU=Test,dc=contoso,dc=com"
foreach($User in $GetUsers)
$DN=$User.DisplayName
Set-CsUser -Identity $DN -EnterpriseVoiceEnabled $False
Whenever you see a helpful reply, click on Vote As Helpful & click on Mark As Answer if a post answers your question.

How can we see previleges assigned to all users using database query

I am using the follwoing query to see previleges assigned to all users , but the suprising thing is that it shows GP_APP_ID as null for a large number of user , even though in discoverer administrator I can see the previleges assigned to those users. I do not understand why it does that. Can someone please help so that I can see the previleges of all users
select unique EU_USERNAME, decode (GP_APP_ID ,1000, 'Desktop / Plus Privilege (U)',
1001, 'Create / Edit Query (U)',
1002, 'Item Drill (U)',
1003, 'Drill Out (U)',
1004, 'Grant Workbook (aka Sharing) (U)',
1005, 'Collect Query Statistics (U)',
1006 ,'Admin Privilege (A)',
1007, 'Set Privilege (A)',
1008, 'Create / Edit Business Area (A)',
1009, 'Format Business Area (A)',
1010, 'Create / Edit Summaries (A)',
1011, 'Not used as far as can be determined',
1012, 'Schedule (U)',
1013, 'User is never required to schedule workbooks (U)',
1014, 'Save workbooks to database (U)',
1015, 'Managed scheduled workbooks (A)',
1016, 'to 1017 Not used as far as can be determined',
1018, 'Change Password',
1019, 'to 1023 Not used as far as can be determined',
1024, 'Create Link (U))') from
EUL5_ACCESS_PRIVS A,
EUL5_EUL_USERS U
where A.AP_EU_ID=U.EU_ID
order by EU_USERNAME
thanks

Hi,
This is probably because the business area security is stored in the same table. So you will probably find that where GP_APP_ID is null then GBA_BA_ID holds the value of the business area. You should change your query to just select where GP_APP_ID IS NOT NULL.
Rod West

How to set an adapted project dashboard view as initial for all users?

Hi all.
We have the cProjects project dashboard active and have defined (via settings, save as) a custom view with the columns relevant in this particular installation.
I can however only save this view with assignment "user" meaning that it only applies to the user logged on when creating it.
We are however looking to have a common global customized view that all users should begin with.
Compare the R/3 functionality with layout management in reports where you can define whether the layout should be
user specific or not
default
My question is therefore if it should be possible to save global views in the above example and if not how to achieve what we are looking for.
I assume one option could be to see if one can use BADI DPR_EVE_DASHBOARD but it seems this should be possible to handle within the application given that the field "Assignment" is there when you save the view. At the moment only with the value "user" available though ...
Regards / Anders

Hej Anders
You can save a default view for all users under administration mode:
http:<server>:<port>/sap/bc/webdynpro/sap/cprojects?sap-config-mode=X
BR
Matthias

Portal favourites for all users to be same

hi all,
we have implemented ESS over portal and i have added some links to portal favourites.
they are appearing fine in my portal favourites section.
Now the requirement is that i want all users to see the same links when they logon by their respective ids.
but this is not happening. those links are in portal favourites for my id only.
Kindly let me what to do.
the way I added those links was to just click over the link in ESS workset and from the page title bar, selected the option, add to portal favourite.
thanks

Hi Ankur,
I guess you want one person to manage favorites for all the users of Portal. In such a case you can achieve this without any development work using KM. Just follow the below steps:
1. Create a folder in KM inside documents folder (Content Admin > KM content > documents), say Favorites.
2. Create links (external/Internal) inside the folder.
3. Create a KM navigation I view by name Favorites and edit the property Path to Initially Displayed Folder = /documents/favorites (your folder path in KM)
4. Add this I view to your homepage and page to the subsequent role
5. Assign the role to the user.
It works like custom favorites for all users using which you can centrally control user favorites just by adding or removing links in the KM favorites folder.
Regards,
Santhosh

Moving Portal Favorites for All Users

Hi,
I need to migrate all portal favorites for all users from one environment to another (Test - Prod)
How can I do this with ICE when all I can see in the userhome directory a folder with my username and my favorites? Where are all the other users favorites stored?
Regards,
Roaa

Hi Rooa,
All Users Portal Favourites are stored under Content Administration -> KM Content -> Root -> Userhome.
This folder has all the data related / specific to a user. You can trasport this through to ICE to your other environment (QA or prod).
Check if this helps.

How to delete existing e-mail signature for all users in outlook 2010

Dears,
How to delete existing (or reset to none ) e-mail signature for all users .
If anyone knows where I can find this script or another way of accomplishing this I would be very thankful.
outlook Version : 2010
PS : Not to disable.
Khaja Hameed

If you want to manage signatures for multiple users your best bet is to use Group Policy.
See:
Setting up a Corporate Signature | HowTo-Outlook
http://www.howto-outlook.com/howto/corporatesignatures.htm
<p>Eric Legault (<a href="https:/mvp.support.microsoft.com/default.aspx/profile/legault">MVP: Outlook</a>)<br/> <a href="http://about.me/ericmlegault">About me...</a><br/> <a href="http://www.outlookappins.com/products/social-contacts">Outlook
Appins</a>: Store Social Media fields in your Outlook Contacts!</p>

SCSM - Service Request Area list - modifications not showing for all users

Hi All
As you cant edit the Service Request Area list, i've settled on changing the default display names to better reflect the categories we want for our SR's. The changes i've made are visible in SCSM on my computer (where i made the changes from), however if
i fire up another instance on a different computer - i can only see the defaults. Anyone seen that before? Typically when i make any sort of change to a list item it is visible for all users.
I'm aware that there is a custom MP out there to allow you to have your own SR Area List, however i was not able to get it to work in our environment (link: http://gallery.technet.microsoft.com/Custom-Service-Request-e4d40738/view/Discussions#content)
Any help would be appreciated.
Thanks

Have you made sure that the selected language in both consoles (the one you are editing from and the one you are testing in) are the same?
When editing lists you will only be asked to save changes (be that changing existing values or adding new ones) if they are stored in a sealed MP - which they should be according to best practice.
If you are not asked which MP to save to then you have already "commited yourself" to a specific MP. You could delete this MP (if there is nothing but the list values in it) or delete them one by one using the console. Then when back to square one the console
will once more ask you which MP to save changes to.
http://codebeaver.blogspot.dk/

ME2N Same variant availble for all users

Hello, its my first post,
Please, somebody knows how can i avail one same variant for all users at Tcode ME2N?
Thanx a lot for your contribute,
Jean Baena

Hello,
Please see information in note 383464
     You can deactivate the 'field-by-field' SPA/GPA attribute by using
     selection variants. Create a new variant for this. When you save this
     variant, you can control the SPA/GPA attribute in the field attributes.
     If a user chooses this variant, then the system also only uses the
     values that are stored in the variant.
     To use a variant already when starting the transaction, create a new
     transaction and start the list display report (for example, RM06EN00)
     using a user-defined variant.
     From Release 4.6B the variant used last is saved as inital variant. If
     you execute the transaction with a selection variant, then the system
     stores this variant for the specific user and for the specific
     transaction. If you execute the respective transaction again, the system
     automatically chooses the selection variant which you used the last time
     again (see Note 326221).
     For the document overview, you have the option to use customer
     enhancement MEQUERY1 to execute own standard variants (see Note 377180).
Regards,

Sideloading app on 8.1 for all users

I want to sideload a windows 8.1 app for all users on a surface tablet. What I was originally doing was running a powershell script as part of a MSI to sideload an app using the
Add-AppxPackage command. I have found out that I actually need to install the windows app for all users and from googling, it looks like
Add-AppxProvisionedPackage is what I am looking for. However, it seems that this command is designed to modify a windows image or modify the Online (current install) to have this app when
a new user is created as the documentation for -PackagePath reads "This package will be added for every new user account." I want the install to add the app to all current users on the machine and to allow new users to have this app as well that
log into the machine. How can I do this?

Hi,
According to the article below, the command Add-AppxProvisionedPackage should be work to sideload store app to all user.
https://technet.microsoft.com/en-us/library/hh824882.aspx
https://technet.microsoft.com/en-us/windows/jj874388.aspx
Sideload the app for all users
DISM is a command-line tool that you can use to service a Windows image—online or offline. (If you are not familiar with DISM, see Deployment Image Servicing and Management Technical Reference.) You can use DISM to provision a Windows Store app in an online
Windows image for all users who share the computer. To do that, you use the Add-ProvisionedAppxPackage option:
Log on to contoso-pc using an account with administrative privileges on the computer. You must use an administrator account here, because you are provisioning an app in the image.
On the Start screen, type PowerShell and press Ctrl + Shift + Enter.
On the User Account Control dialog box, click Yes.
At the Windows PowerShell prompt, run the following command, where SampleApp is the path and file name of the package file you created (for example, MySample_1.0.0.0_AnyCPU_Debug.appx):
DISM /Online /Add-ProvisionedAppxPackage /PackagePath:“SampleApp” /skiplicense
Monitor the installation, and close the Windows PowerShell window after it finishes.
To test this example, you need to log onto to the computer using one of your test accounts. You cannot run the app by using the built-in local or domain Administrator account. In this case, we logged on to the computer as Mark. Then, on the Start screen, click
the app to run it. (If you do not see the app on the Start screen, type the app’s name to find it, and then click the app’s tile.) After verifying that the app works for the current user account, log onto the computer using a different test account and run
the app. Because you used DISM to provision the app in the image, it is available to both accounts.
Roger Lu
TechNet Community Support

How do you configure Firefox for all users on a machine?

I want to
1. Take my existing set-up of Firefox
a. with all bookmarks
b. with all my chosen options
c. with my default start-up home page
d. bypass all the initial Firefox startup screen and "make this your default screen"
2. Have it be the base set-up for all users that log into a machine on our domain.
Is there a config file? Where do I place this config file so when all open their firefox it takes the above settings. I am creating a base image using VMware and will want this set-up so when a user log in with their logon credentials and open Firefox, it already has the above mentioned settings in place.

See CCK Wizard: https://addons.mozilla.org/firefox/addon/cck/
You can use a mozilla.cfg file in the Firefox program folder to lock prefs or specify new (default) values.
Place a file local-settings.js in the defaults\pref folder where you also find the file channel-prefs.js to specify using mozilla.cfg.
pref("general.config.filename", "mozilla.cfg");
pref("general.config.obscure_value", 0); // use this to disable the byte-shift
See:
*http://kb.mozillazine.org/Locking_preferences
These functions can be used in the mozilla.cfg file:
defaultPref(); // set new default value
pref(); // set pref, but allow changes in current session
lockPref(); // lock pref, disallow changes

How do I set Premiere preferences for all users - University lab machine?

I am setting up an editing suite for our University which has a "per machine" Creative Cloud licence. It is a PC installation. This machine will be used by a class of students who will log in with their own credentials. I need to set the preferences for Premiere (video output, workspace layout, default drives etc) so that it will be the same for all users logging in since we want a consistent setup for teaching purposes and dont want to have to help each student set up so that it shows correctly on the monitors. Is there a way of saving this setting as the default for every user?
The most important one is the preferences - Playback in order to set up the second monitor.
Message was edited by: Bruce Cooke

Hopefully you did manage to do it.
Reading this should be enough Adobe Premiere Pro Help | Preferences

Credential manager to see credentials stored for all users?

Similar Messages

Maybe you are looking for