<p><a href="https://docs.microsoft.com/ko-kr/windows/security/threat-protection/security-policy-settings/network-access-do-not-allow-storage-of-passwords-and-credentials-for-network-authentication" target="_blank" class="ke-link">https://docs.microsoft.com/ko-kr/windows/security/threat-protection/security-policy-settings/network-access-do-not-allow-storage-of-passwords-and-credentials-for-network-authentication</a> <br><a href="https://docs.microsoft.com/ko-kr/troubleshoot/windows-server/user-profiles-and-logon/cached-domain-logon-information" target="_blank" class="ke-link">https://docs.microsoft.com/ko-kr/troubleshoot/windows-server/user-profiles-and-logon/cached-domain-logon-information</a></p><p><a href="https://netcraftsmen.com/security-mistakes-that-leave-you-vulnerable-to-compromise-5-caching-windows-credentials/" target="_blank" class="ke-link">https://netcraftsmen.com/security-mistakes-that-leave-you-vulnerable-to-compromise-5-caching-windows-credentials/</a></p><p><a href="https://social.technet.microsoft.com/Forums/windows/en-US/f870595e-3da4-4ad6-9c4b-2b89a9626056/group-policy-to-disable-credential-manager" target="_blank" class="ke-link">https://social.technet.microsoft.com/Forums/windows/en-US/f870595e-3da4-4ad6-9c4b-2b89a9626056/group-policy-to-disable-credential-manager</a></p><p>reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v CachedLogonsCount /t REG_SZ /d 0 /f</p><p> </p><p>CachedLogonsCount 0으로 해도 혼자 사용 하는 컴퓨터는 문제가 없다. 만약 다른 사용자와 사용을 해야 한다면 10으로 하거나 2로 하거나 3으로 해서 등록 하면 된다.</p><p> </p><div class="figure-img" data-ke-type="image" data-ke-style="alignCenter" data-ke-mobilestyle="widthOrigin"><img src="https://t1.daumcdn.net/cafeattach/1HRzv/59b89631f2ea8a7d25438ca468332ed70929a718" class="txc-image" data-img-src="https://t1.daumcdn.net/cafeattach/1HRzv/59b89631f2ea8a7d25438ca468332ed70929a718" data-origin-width="1125" data-origin-height="532"></div><p>자격 증명을 삭제 하니 크롬의 로그인이 삭제 되었다. 크롬 구글 로그인과 관계가 있어서 자꾸 생성 되는 것 같다. 결론.</p><p>하지만 분명한건 웹 자격 증명으로 로그인 되어야 하는대 여기로 된다는 수상하다.</p><p> </p><p> </p><p> </p><p>이렇게 만드려면 아래 처럼 하면 된다.</p><p>시스템 관리자가 windows 자격 증명을 사용 할수 없도록 설정했습니다.</p><p>reg add "HKLM\System\CurrentControlSet\Control\Lsa" /v DisableDomainCreds /t REG_DWORD /d 1 /f</p><p><a href="https://www.stigviewer.com/stig/windows_7/2012-07-02/finding/V-3376" target="_blank" class="ke-link">https://www.stigviewer.com/stig/windows_7/2012-07-02/finding/V-3376</a></p><p>보안을 위해서 차단 하는.</p>
<!-- -->
echo 자격 증명 신뢰 할수 있는 경로 요구 https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.CredentialsUI::EnableSecureCredentialPrompting&Language=ko-kr 이걸 켜면 컴퓨터에서 아무 것도 할수가 없다 ㅠ
첫댓글 control userpasswords2
https://cafe.daum.net/candan/AurF/78
https://docs.microsoft.com/ko-kr/windows/security/identity-protection/hello-for-business/passwordless-strategy
https://www.petervanderwoude.nl/post/excluding-the-password-credential-provider/
https://social.technet.microsoft.com/Forums/azure/en-US/9c23976a-3e2b-4b71-9f19-83ee3df0848b/how-to-disable-additional-credential-providers?forum=w8itprosecurity
자격증명 제외
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers
Disabled 1
https://help.duo.com/s/article/4987?language=en_US 자격증명 분류
https://docs.microsoft.com/ko-kr/windows-server/security/credentials-protection-and-management/configuring-additional-lsa-protection
las 관련
echo 자격 증명 신뢰 할수 있는 경로 요구 https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.CredentialsUI::EnableSecureCredentialPrompting&Language=ko-kr
이걸 켜면 컴퓨터에서 아무 것도 할수가 없다 ㅠ