Credential Manager not updating passwords

%3CLINGO-SUB%20id%3D%22lingo-sub-213695%22%20slang%3D%22en-US%22%3ECredential%20Manager%20not%20updating%20passwords%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-213695%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20see%20a%20pattern%20when%20our%20users%20change%20password%20every%2090%20days.%20A%20lot%20of%20them%20get%20Outlook%20promts%20after%20and%20we%20need%20to%20clear%20the%20credential%20manager.%20It%20seems%20that%20windows%20do%20not%20update%20all%20instances%20of%20the%20users%20credentials%20and%20the%20Outlook%20pass%20them%20on%20with%20the%20old%20password.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20one%20else%20have%20seen%20this%20a%20lot%20in%20Windows%2010%3F%20And%20do%20anyone%20have%20any%20idears%20on%20what%20to%20do%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-357764%22%20slang%3D%22en-US%22%3ERe%3A%20Credential%20Manager%20not%20updating%20passwords%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-357764%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20still%20see%20this%20issue.%20We%20have%20been%20running%20a%20case%20with%20Microsoft%20support%20to%20try%20and%20find%20the%20root%20cause%2C%20but%20with%20no%20success.%20As%20of%20now%2C%20we%20have%20accepted%20that%20this%20can%20happen%20and%20have%20a%20script%20to%20fix%20it%2C%20when%20users%20report%20it.%20But%20according%20to%20Microsoft%2C%20Office%20365%20Pro%20Plus%20do%20not%20use%20the%20credential%20manager%20when%20connecting%20to%20Office%20365%3F%3F%3F%3F%20IT%20life%20is%20not%20easy%20%3A(%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-357683%22%20slang%3D%22en-US%22%3ERe%3A%20Credential%20Manager%20not%20updating%20passwords%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-357683%22%20slang%3D%22en-US%22%3E%3CP%3EThis%20happened%20to%20me%20and%20another%20colleague.%26nbsp%3B%20I%20would%20be%20curious%20under%20what%20conditions%20Credential%20Manager%20is%20able%20or%20not%20able%20to%20update%20a%20set%20of%20credentials.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-331206%22%20slang%3D%22en-US%22%3ERe%3A%20Credential%20Manager%20not%20updating%20passwords%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-331206%22%20slang%3D%22en-US%22%3E%3CP%3EHas%20there%20been%20any%20hotfix%20or%20solutions%20posted%20for%20this%20issue%3F%26nbsp%3B%20%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-266867%22%20slang%3D%22en-US%22%3ERe%3A%20Credential%20Manager%20not%20updating%20passwords%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-266867%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20are%20seeing%20the%20same%20issue%20for%20some%20time%20now.%20We%20are%20windows%2010%2C%20Outlook%2015%20and%2016%2C%20SKype%2C%20O365%2C%20and%20SecureAuth%202fa.%20Deleting%20the%20credentials%20from%20Credential%20manager%20is%20the%20work%20around.%20Some%20have%20posted%20scripts%20to%20do%20this%20quickly%20as%20another%20work%20around.%20have%20not%20yet%20found%20the%20hotfix%20or%20patch%20for%20this.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-486192%22%20slang%3D%22en-US%22%3ERe%3A%20Credential%20Manager%20not%20updating%20passwords%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-486192%22%20slang%3D%22en-US%22%3E%3CP%3EHas%20there%20been%20any%20updates%20on%20this%3F%26nbsp%3B%20%26nbsp%3B%20It%20seems%20to%20be%20happening%20with%20onedrive%20sync%20client%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-548200%22%20slang%3D%22en-US%22%3ERe%3A%20Credential%20Manager%20not%20updating%20passwords%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-548200%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F54954%22%20target%3D%22_blank%22%3E%40Eric%20Sabo%3C%2FA%3Eno%20we%20just%20started%20to%20accept%20that%20this%20could%20happen.%20We%20created%20a%20script%20that%20clear%20the%20cached%20credentials%20when%20a%20user%20goes%20to%20the%20Service%20Desk%20to%20get%20help.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-548257%22%20slang%3D%22en-US%22%3ERe%3A%20Credential%20Manager%20not%20updating%20passwords%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-548257%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F56139%22%20target%3D%22_blank%22%3E%40Jesper%20Stein%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHere%20is%20a%20script%20i%20have%20found%20and%20tested%20to%20work.%20I%20still%20would%20like%20to%20know%20why%2C%20if%20my%20password%20is%20reset%20in%20AD%2C%20and%20Outlook%20asks%20for%20my%20new%20password%2C%20why%20it%20cant%20update%20the%20existing%20credentials%3F%20if%20i%20clear%20them%2C%20it%20accepts%20and%20writes%20the%20new%20value.%20If%20i%20dont%2C%20then%20it%20continually%20prompts%20for%20credentials%20even%20after%20you%20type%20in%20the%20new%20password%20because%20it's%20unable%20to%20update%20the%20value.%26nbsp%3B%3C%2FP%3E%3CP%3ESave%20this%20in%20a%20txt%20file%20and%20name%20it%20PasswordChange.cmd%20or%20something%20with%20.CMD%20and%20execute%20it%20before%20a%20password%20change.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFor%20%2FF%20%22tokens%3D1%2C2%20delims%3D%20%22%20%25%25G%20in%20('cmdkey%20%2Flist%20%5E%7C%20findstr%20Target')%20do%20cmdkey%20%2Fdelete%20%25%25H%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-548924%22%20slang%3D%22en-US%22%3ERe%3A%20Credential%20Manager%20not%20updating%20passwords%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-548924%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20for%20supplying%20the%20script%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F222986%22%20target%3D%22_blank%22%3E%40Bill%20Dixon%3C%2FA%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F56139%22%20target%3D%22_blank%22%3E%40Jesper%20Stein%3C%2FA%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1929154%22%20slang%3D%22en-US%22%3ERe%3A%20Credential%20Manager%20not%20updating%20passwords%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1929154%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F222986%22%20target%3D%22_blank%22%3E%40Bill%20Dixon%3C%2FA%3E%26nbsp%3B%20This%20script%20essentially%20wipes%20everything%20from%20CredMgr.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eif%20you%20are%20looking%20for%20something%20more%20specific%20to%20just%20the%20Outlook%20creds%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Epowershell%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eclear%3CBR%20%2F%3E%24keys%20%3D%20cmdkey%20%2Flist%3CBR%20%2F%3EForEach(%24key%20in%20%24keys)%7B%3CBR%20%2F%3E%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3Bif(%24key%20-like%20%22*Target%3A*%22%20-and%20%24key%20-like%20%22*MS.Outlook*%22)%7B%3CBR%20%2F%3E%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3Bcmdkey%20%2Fdel%3A(%24key%20-replace%20%22%20%22%2C%22%22%20-replace%20%22Target%3A%22%2C%22%22)%3CBR%20%2F%3E%26nbsp%3B%20%26nbsp%3B%20%7D%3CBR%20%2F%3E%7D%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2203136%22%20slang%3D%22en-US%22%3ERe%3A%20Credential%20Manager%20not%20updating%20passwords%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2203136%22%20slang%3D%22en-US%22%3EYes%2C%20we%20have%20the%20same%20problem%20and%20it%20affects%20our%20RemoteApps.%20After%20a%20user%20changes%20their%20Windows%20password%20the%20next%20time%20they%20go%20to%20launch%20a%20RemoteApp%20it%20immediately%20locks%20their%20account.%20When%20this%20occurs%20we%20have%20to%20manually%20clear%20out%20the%20credential%20manager.%3C%2FLINGO-BODY%3E
Contributor

We see a pattern when our users change password every 90 days. A lot of them get Outlook promts after and we need to clear the credential manager. It seems that windows do not update all instances of the users credentials and the Outlook pass them on with the old password.

 

Any one else have seen this a lot in Windows 10? And do anyone have any idears on what to do?

10 Replies

We are seeing the same issue for some time now. We are windows 10, Outlook 15 and 16, SKype, O365, and SecureAuth 2fa. Deleting the credentials from Credential manager is the work around. Some have posted scripts to do this quickly as another work around. have not yet found the hotfix or patch for this.

Has there been any hotfix or solutions posted for this issue?   

This happened to me and another colleague.  I would be curious under what conditions Credential Manager is able or not able to update a set of credentials.

We still see this issue. We have been running a case with Microsoft support to try and find the root cause, but with no success. As of now, we have accepted that this can happen and have a script to fix it, when users report it. But according to Microsoft, Office 365 Pro Plus do not use the credential manager when connecting to Office 365???? IT life is not easy :(

Has there been any updates on this?    It seems to be happening with onedrive sync client

@Eric Sabono we just started to accept that this could happen. We created a script that clear the cached credentials when a user goes to the Service Desk to get help.

@Jesper Stein 

Here is a script i have found and tested to work. I still would like to know why, if my password is reset in AD, and Outlook asks for my new password, why it cant update the existing credentials? if i clear them, it accepts and writes the new value. If i dont, then it continually prompts for credentials even after you type in the new password because it's unable to update the value. 

Save this in a txt file and name it PasswordChange.cmd or something with .CMD and execute it before a password change. 

 

For /F "tokens=1,2 delims= " %%G in ('cmdkey /list ^| findstr Target') do cmdkey /delete %%H

Thanks for supplying the script @Bill Dixon @Jesper Stein 

@Bill Dixon  This script essentially wipes everything from CredMgr.  

 

 

if you are looking for something more specific to just the Outlook creds:

 

powershell:

 

clear
$keys = cmdkey /list
ForEach($key in $keys){
           if($key -like "*Target:*" -and $key -like "*MS.Outlook*"){
                 cmdkey /del:($key -replace " ","" -replace "Target:","")
    }
}

Yes, we have the same problem and it affects our RemoteApps. After a user changes their Windows password the next time they go to launch a RemoteApp it immediately locks their account. When this occurs we have to manually clear out the credential manager.