I always recommend a profile management system for Citrix XenApp installations; the free Flex Profile Kit is a favourite, but I recently implemented AppSense Environment Manager (EM) for profile management on Windows 2008 Server and found that Internet Explorer passwords were not being saved. After some investigation I found that the password store is handled very differently in Windows 2008 Server and Vista.
In Windows 2008/Vista the password store in the user’s profile is not roamed, even though it is in the roaming folder… that makes lots of sense…
From what I can gather the Microsoft method is to use Certificate Services which is configured via GPO and saves credentials to the user’s AD object. See this article and this article.
From an AppSense EM perspective the “Manage Certificates” personalisation option saves IE passwords, so this is the easiest option.
A second method of saving IE passwords using AppSense or Flex Profiles is to save the Protect folder from the user’s profile at logoff and restore it at logon. I have tested this and it works perfectly.
The piece of data that needs to be saved from the user’s profile is the folder %userprofile%\AppData\Roaming\Microsoft\Protect
Location
Level 13 (Regus)
92 Albert St
Auckland
We also have a virtual office in Wellington.
Contact Details
0800 000 141
Postal Address
PO Box 34797,
Birkenhead, Auckland 0746
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.
3 Comments
Thank you for this. I have been struggling to capture the password store using Appsense EM for the past week until I found this post.
Hi, so its just that folder and nothing else?
Hi,
Thanks for article, but It is possible copy this data from %userprofile%AppDataRoamingMicrosoftProtect to another server and everything be works correctly. thanks for reply.