gpo to flush rdp credentials and disable password saving

Question

Users are saving RDP credentials in their RDP mstsc window. How to remove the saved credentials. I know there is a option to remove REMEMBER ME option. But that is not removing saved credentials.

Also i created a test machine to test this with test AD

If i save by calling remotely using IP and save password next time it ask me password giving an error

“Your system administrator does not allow the user of saved credentials to log on to the remote computer XXX because its identity is not fully verified. Please enter new credentials”.

then i have to save RDP details in generic credentials in credential manager using TERMSRV

My aim is to flush saved credentials for RDP and disable the remember me option( this solution i got)**

Answer 1

Hello,

To delete the credentials, the best option is to access Credential Manager and from there under the Windows Credentials section, tap Windows Credentials, click TERMSRV and click Remove link.

Also, for doing this remotely, you can create a TXT file with computernames (NetBIOS name should be sufficient) and use an automated script to delete the credential store:

ForEach($computer in (Get-Content c:\PClist.txt )) { psexec \$computer -s winrm.cmd quickconfig -q Enter-PSSession -ComputerName $computer Get-childitem -path “C:\Windows\SoftwareDistribution” -Recurse -force | Remove-item -Recurse }

To prevent the password saving: you need to Enable the next GPO: run gpedit.msc>User Configuration.>Administrative Templates.>Windows Components.>Remote Desktop Services.>Remote Desktop Connection Client.>Setting: Do not allow passwords to be saved

--If the reply is helpful, please Upvote and Accept as answer--