Article ID: 321942
Article Last Modified on 2/1/2007
APPLIES TO
- Microsoft Internet Explorer 5.5 Service Pack 2
- Microsoft Internet Explorer 5.5 Service Pack 2
- Microsoft Internet Explorer 6.0
- Microsoft Internet Explorer 6.0
- Microsoft Internet Explorer 6.0
- Microsoft Internet Explorer 6.0
- Microsoft Internet Explorer 6.0
This article was previously published under Q321942
SYMPTOMS
When you use Windows Explorer to start Internet Explorer and then connect to a secure Web site, you are prompted to provide credentials only during the first connection. After this connection occurs, you can connect to the secure Web site again by using cached credentials. Because of this, an unauthorized user may be able to connect to the secure Web site by using the cached credentials. This symptom also occurs if you start Internet Explorer from the desktop or the Start menu. However, under these conditions, the cached credentials are cleared when you quit Internet Explorer.
CAUSE
This problem may occur because closing an Internet Explorer window that was created from the Explorer process does not clear the cache. This occurs because the Explorer process is always running. Explorer is always running because it is responsible for the desktop and other parts of the user interface.
WORKAROUND
To work around this problem, set the Explorer process to run in separate process space:
- In Windows Explorer, click Folder Options on the Tools menu, and then click the View tab.
- Click to select the Launch folder windows in a separate process check box, click OK, and then restart your computer.
After you restart your computer, Explorer windows run in a process that is separate from the Explorer Shell process that controls the user interface and the desktop. Because of this, the cache is cleared when you close a window. Each user who starts Internet Explorer and connects to a secure Web site is prompted to provide credentials.
STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.
Keywords: kbenv kbui kbprb KB321942
