Microsoft KB Archive/321942

= No Credential Prompt When You Connect to Secure Web Site After You Use Explorer to Start Internet Explorer =

Article ID: 321942

Article Last Modified on 2/1/2007

-

APPLIES TO


 * Microsoft Internet Explorer 5.5 Service Pack 2
 * Microsoft Internet Explorer 5.5 Service Pack 2
 * Microsoft Internet Explorer 6.0
 * Microsoft Internet Explorer 6.0
 * Microsoft Internet Explorer 6.0
 * Microsoft Internet Explorer 6.0
 * Microsoft Internet Explorer 6.0

-



This article was previously published under Q321942



SYMPTOMS
When you use Windows Explorer to start Internet Explorer and then connect to a secure Web site, you are prompted to provide credentials only during the first connection. After this connection occurs, you can connect to the secure Web site again by using cached credentials. Because of this, an unauthorized user may be able to connect to the secure Web site by using the cached credentials. This symptom also occurs if you start Internet Explorer from the desktop or the Start menu. However, under these conditions, the cached credentials are cleared when you quit Internet Explorer.



CAUSE
This problem may occur because closing an Internet Explorer window that was created from the Explorer process does not clear the cache. This occurs because the Explorer process is always running. Explorer is always running because it is responsible for the desktop and other parts of the user interface.



WORKAROUND
To work around this problem, set the Explorer process to run in separate process space:
 * 1) In Windows Explorer, click Folder Options on the Tools menu, and then click the View tab.
 * 2) Click to select the Launch folder windows in a separate process check box, click OK, and then restart your computer.

After you restart your computer, Explorer windows run in a process that is separate from the Explorer Shell process that controls the user interface and the desktop. Because of this, the cache is cleared when you close a window. Each user who starts Internet Explorer and connects to a secure Web site is prompted to provide credentials.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

Keywords: kbenv kbui kbprb KB321942

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.