Credential Manager not updating passwords

%3CLINGO-SUB%20id%3D%22lingo-sub-213695%22%20slang%3D%22en-US%22%3ECredential%20Manager%20not%20updating%20passwords%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-213695%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20see%20a%20pattern%20when%20our%20users%20change%20password%20every%2090%20days.%20A%20lot%20of%20them%20get%20Outlook%20promts%20after%20and%20we%20need%20to%20clear%20the%20credential%20manager.%20It%20seems%20that%20windows%20do%20not%20update%20all%20instances%20of%20the%20users%20credentials%20and%20the%20Outlook%20pass%20them%20on%20with%20the%20old%20password.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20one%20else%20have%20seen%20this%20a%20lot%20in%20Windows%2010%3F%20And%20do%20anyone%20have%20any%20idears%20on%20what%20to%20do%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-357764%22%20slang%3D%22en-US%22%3ERe%3A%20Credential%20Manager%20not%20updating%20passwords%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-357764%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20still%20see%20this%20issue.%20We%20have%20been%20running%20a%20case%20with%20Microsoft%20support%20to%20try%20and%20find%20the%20root%20cause%2C%20but%20with%20no%20success.%20As%20of%20now%2C%20we%20have%20accepted%20that%20this%20can%20happen%20and%20have%20a%20script%20to%20fix%20it%2C%20when%20users%20report%20it.%20But%20according%20to%20Microsoft%2C%20Office%20365%20Pro%20Plus%20do%20not%20use%20the%20credential%20manager%20when%20connecting%20to%20Office%20365%3F%3F%3F%3F%20IT%20life%20is%20not%20easy%20%3A(%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-357683%22%20slang%3D%22en-US%22%3ERe%3A%20Credential%20Manager%20not%20updating%20passwords%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-357683%22%20slang%3D%22en-US%22%3E%3CP%3EThis%20happened%20to%20me%20and%20another%20colleague.%26nbsp%3B%20I%20would%20be%20curious%20under%20what%20conditions%20Credential%20Manager%20is%20able%20or%20not%20able%20to%20update%20a%20set%20of%20credentials.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-331206%22%20slang%3D%22en-US%22%3ERe%3A%20Credential%20Manager%20not%20updating%20passwords%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-331206%22%20slang%3D%22en-US%22%3E%3CP%3EHas%20there%20been%20any%20hotfix%20or%20solutions%20posted%20for%20this%20issue%3F%26nbsp%3B%20%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-266867%22%20slang%3D%22en-US%22%3ERe%3A%20Credential%20Manager%20not%20updating%20passwords%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-266867%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20are%20seeing%20the%20same%20issue%20for%20some%20time%20now.%20We%20are%20windows%2010%2C%20Outlook%2015%20and%2016%2C%20SKype%2C%20O365%2C%20and%20SecureAuth%202fa.%20Deleting%20the%20credentials%20from%20Credential%20manager%20is%20the%20work%20around.%20Some%20have%20posted%20scripts%20to%20do%20this%20quickly%20as%20another%20work%20around.%20have%20not%20yet%20found%20the%20hotfix%20or%20patch%20for%20this.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-486192%22%20slang%3D%22en-US%22%3ERe%3A%20Credential%20Manager%20not%20updating%20passwords%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-486192%22%20slang%3D%22en-US%22%3E%3CP%3EHas%20there%20been%20any%20updates%20on%20this%3F%26nbsp%3B%20%26nbsp%3B%20It%20seems%20to%20be%20happening%20with%20onedrive%20sync%20client%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-548200%22%20slang%3D%22en-US%22%3ERe%3A%20Credential%20Manager%20not%20updating%20passwords%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-548200%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F54954%22%20target%3D%22_blank%22%3E%40Eric%20Sabo%3C%2FA%3Eno%20we%20just%20started%20to%20accept%20that%20this%20could%20happen.%20We%20created%20a%20script%20that%20clear%20the%20cached%20credentials%20when%20a%20user%20goes%20to%20the%20Service%20Desk%20to%20get%20help.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-548257%22%20slang%3D%22en-US%22%3ERe%3A%20Credential%20Manager%20not%20updating%20passwords%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-548257%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F56139%22%20target%3D%22_blank%22%3E%40Jesper%20Stein%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHere%20is%20a%20script%20i%20have%20found%20and%20tested%20to%20work.%20I%20still%20would%20like%20to%20know%20why%2C%20if%20my%20password%20is%20reset%20in%20AD%2C%20and%20Outlook%20asks%20for%20my%20new%20password%2C%20why%20it%20cant%20update%20the%20existing%20credentials%3F%20if%20i%20clear%20them%2C%20it%20accepts%20and%20writes%20the%20new%20value.%20If%20i%20dont%2C%20then%20it%20continually%20prompts%20for%20credentials%20even%20after%20you%20type%20in%20the%20new%20password%20because%20it's%20unable%20to%20update%20the%20value.%26nbsp%3B%3C%2FP%3E%3CP%3ESave%20this%20in%20a%20txt%20file%20and%20name%20it%20PasswordChange.cmd%20or%20something%20with%20.CMD%20and%20execute%20it%20before%20a%20password%20change.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFor%20%2FF%20%22tokens%3D1%2C2%20delims%3D%20%22%20%25%25G%20in%20('cmdkey%20%2Flist%20%5E%7C%20findstr%20Target')%20do%20cmdkey%20%2Fdelete%20%25%25H%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-548924%22%20slang%3D%22en-US%22%3ERe%3A%20Credential%20Manager%20not%20updating%20passwords%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-548924%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20for%20supplying%20the%20script%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F222986%22%20target%3D%22_blank%22%3E%40Bill%20Dixon%3C%2FA%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F56139%22%20target%3D%22_blank%22%20rel%3D%22noopener%22%3E%40Jesper%20Stein%3C%2FA%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Contributor

We see a pattern when our users change password every 90 days. A lot of them get Outlook promts after and we need to clear the credential manager. It seems that windows do not update all instances of the users credentials and the Outlook pass them on with the old password.

 

Any one else have seen this a lot in Windows 10? And do anyone have any idears on what to do?

8 Replies
Highlighted

We are seeing the same issue for some time now. We are windows 10, Outlook 15 and 16, SKype, O365, and SecureAuth 2fa. Deleting the credentials from Credential manager is the work around. Some have posted scripts to do this quickly as another work around. have not yet found the hotfix or patch for this.

Highlighted

Has there been any hotfix or solutions posted for this issue?   

Highlighted

This happened to me and another colleague.  I would be curious under what conditions Credential Manager is able or not able to update a set of credentials.

Highlighted

We still see this issue. We have been running a case with Microsoft support to try and find the root cause, but with no success. As of now, we have accepted that this can happen and have a script to fix it, when users report it. But according to Microsoft, Office 365 Pro Plus do not use the credential manager when connecting to Office 365???? IT life is not easy :(

Highlighted

Has there been any updates on this?    It seems to be happening with onedrive sync client

Highlighted

@Eric Sabono we just started to accept that this could happen. We created a script that clear the cached credentials when a user goes to the Service Desk to get help.

Highlighted

@Jesper Stein 

Here is a script i have found and tested to work. I still would like to know why, if my password is reset in AD, and Outlook asks for my new password, why it cant update the existing credentials? if i clear them, it accepts and writes the new value. If i dont, then it continually prompts for credentials even after you type in the new password because it's unable to update the value. 

Save this in a txt file and name it PasswordChange.cmd or something with .CMD and execute it before a password change. 

 

For /F "tokens=1,2 delims= " %%G in ('cmdkey /list ^| findstr Target') do cmdkey /delete %%H

Highlighted

Thanks for supplying the script @Bill Dixon @Jesper Stein