Credential Manager - Change Password

Posted on 2011-04-19
Medium Priority
Last Modified: 2012-05-11
In Windows 7's Credential Manager, we added an RDP server with my credentials. It works. If I change my password on the Domain, it doesn't reciprocate to the Credential Manager. Does anyone know of a way to make this happen (via script, gpo, etc.)? Thanks.
Question by:CMilne
  • 3
LVL 52

Accepted Solution

Jackie Man earned 2000 total points
ID: 35472381
The password saved in Credential Manager can be updated by script.

BUT, you need to ask your domain admin to change the following local group policy in your windows 7.

1. Open Group Policy Editor via cmd -> gpedit.msc
2. Navigate to Local Computer Policy\Computer Configuration\Administrative Templates\System\Credentials Delegation\
3.Open Setting Allow Delegating Saved Credentials with NTLM-only Server Authentication, set it to Enabled click on button Show... and in Show Contents window add Value TERMSRV/[Ip address of the terminal server]. Close all windows by pressing OK.
4. Run cmd and enter gpupdate command to update your policy.

Source: http://itowns.blogspot.com/2009/01/remote-desktop-not-allowed-to-use-saved.html

The script to change the RDP password is as follows:-

cmdkey /add:TERMSRV/[IP address of terminal server] /user:[Doamin User Name] /pass:[Password]

Open in new window

where [Doamin User Name] is your user name for domain logon and [Password] is your new password.

Save the script above as a batch file and you can edit it after you have changed your domain password.

Of course, encrypted the bat file and save it at a secured location.
LVL 52

Expert Comment

by:Jackie Man
ID: 35472397
If still no go, you may need to change the script as follows:-

attrib -h %USERPROFILE%\Documents\Default.rdp
del %USERPROFILE%\Documents\Default.rdp 
cmdkey /add:TERMSRV/[IP address of terminal server] /user:[Doamin User Name] /pass:[Password]

Open in new window

The script above will delete the existing default.rdp file and the system will create a new default.rdp file when you start a new rdp session.
LVL 52

Expert Comment

by:Jackie Man
ID: 35474822
The information inside the Credential Manager is stored locally in your Windows 7 and I do not think that any server-side script or GPO can update the password inside it.

Author Closing Comment

ID: 35690480
This worked

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For both online and offline retail, the cross-channel business is the most recent pattern in the B2C trade space.
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This Micro Tutorial will teach you how to change your appearance and customize your Windows 7 interface to your unique preference. This will be demonstrated using Windows 7 operating system.
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
Suggested Courses
Course of the Month15 days, 6 hours left to enroll

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question