Disable 'save password'

[Graham Caparulo]

Our scenario...  

 

- XenDesktop/XenApp as a Service, using the included Citrix Cloud hosted StoreFront.  Thus, we have no access to IIS nor can we run 2FA.

- Windows 10 Home thin clients, locked down with Desktop Lock.  /includeSSON flag works fine

- Windows 10 Home local admin user (for desktop lock bypass) and a local non-admin user with a blank password (user is called 'press enter').  This is a hot-desk environment.

 

Scenario works great.  Nice, inexpensive thin client, with great performance.  OS is managed by LabTech.

 

Problem, users are able to check 'save password' at the receiver login and AD credentials are cached.  Next person logging in with the hot-desk username of 'press enter' gets auto logged with the last persons AD creds.

 

I've tried the usual:

- install Receiver with the ALLOWSAVEPWD=N switch

- Registry- ...Dazzle/AllowSavePwd = N

- appsrv.ini, added NoSavePwordOption=On

 

nothing works.  I even tried  C:\Program Files (x86)\Citrix\ICA Client\SelfServicePlugin\CleanUp.exe" -cleanUser to run at login via scheduled task, which does clear the cached AD creds, but it kills the Desktop Lock environment...

 

Any ideas, other than, "stop being cheap and get a Win Pro thin client" ?  :(

 

Thanks!

[Graham Caparulo]

I came up with a workaround for anyone interested.

 

I'm deleting the following directory at login via a Windows Scheduled Task:

 

%localappdata%\Citrix\AuthManager\data

 

Each time a user logs off their ICA session, Desktop Lock forces a local PC logoff.  This should do the trick, but I'd welcome other solutions/ideas if anyone has any!

 

 

 

[Nick Suender1709152578]

Did you ever find a better solution?  I am also trying to disable password saving.

 

Nick

[Graham Caparulo]

workaround I posted above is working well for us.  happy to share the scheduled task / script details if you're interested.

[Pit Zoller]

Hello gcaparu439,

i'm very interested in you workaround. Can you post it for me pls? 

Thx 

[Graham Caparulo]

from above:

 

Quote

 

I'm deleting the following directory at login via a Windows Scheduled Task:

 

%localappdata%\Citrix\AuthManager\data

 

 

if you have any specific questions, I'm happy to answer them.

[Pit Zoller]

Hello again,

 

thank you for the fast answer. But i have never worked with the scheduler before. Can you please describe what i have to do exactly?

 

Thank you

[Graham Caparulo]

https://technet.microsoft.com/en-us/library/cc748993(v=ws.11).aspx

 

CLI: schtasks /Create /F /RU "press enter" /SC onlogon /TN "DeleteReceiverAuthCache" /TR "C:\scripts\DeleteReceiverAuthCache.bat"

 

.bat file contents:

rmdir /s /q "%localappdata%\Citrix\AuthManager\data"

 

 

[Petr Jerabek]

May be this is the answer to your topic - https://support.citrix.com/article/CTX212369 (obsolete for current SF version)

Better one -  https://www.carlstalhood.com/storefront-tweaks/#remembermypassword