China DOS Union

I have several BAT files. One is for cleaning system junk, and the other is to call the WIN control command.

After running control userpasswords2, enter the password management, where the passwords for LAN shares are remembered.

Using the batch command net use * /del /y can clear them, but this doesn't seem to work every time.

Because as a network administrator, many important documents need to be locked and users shouldn't be able to see them.

I want a VBS script that, when run, will delete the shared passwords.

I've searched many forums, but there are no scripts about this.

Can VBS achieve this... Batch can't... Depressed ING......

Also seeking. Hope experts come

Use the Public Computer Security Template after installing the system.
Or
Open Local Policies, and enable "Do not allow saving credentials or.NET Passports for network authentication" in the Security Options.

Originally posted by everest79 at 2009-2-25 03:39 AM:
Use the public computer security template after installing the system
Or
Open the local policy, and enable "Do not allow saving credentials or.NET Passpores for network authentication" in the security options

Does this need to be implemented for domain management?
Is there a VBS script implementation for standalone computers?

Originally posted by andison625 at 2009-2-25 10:26 AM:

Does this need to be implemented with domain management?
Is there a VBS script implementation for standalone machines?

Local policies are exactly applied to non-domain-joined settings, just try it and you'll know

Upstairs, but this needs to be done in batches, which is quite troublesome. Is there a VBS script to modify this setting? Just restart the computer after setting it?

Click "Start", click "Run", type "gpedit.msc", and then click "OK".

Under "Computer Configuration", expand "Windows Settings", "Security Settings", "Local Policies", and then expand "Security Options".

In this policy pane, right - click "Network access: Do not allow storage of credentials or.NET Passport for network authentication", click "Properties", click to select "Disabled", and then click "OK".

Click "Start", click "Run", type "regedit", and then click "OK".

Find and then right - click the registry sub - key under:

The "Validation" value is set to 0.

Restart the computer.

Under the registry HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa, set the value of "disabledomaincreds" to 1, and then restart