When you log on to a network computer using Remote Desktop Connection, the logon dialog box includes a check box named Remember My Credentials, as shown in Figure 1. If you activate this check box, Windows 7 won’t prompt you to enter a password when you connect to the computer in the future.
That’s certainly
convenient, but it’s a gaping security hole because it enables anyone
who can access your computer to also access the remote computer’s
desktop. Therefore, it’s never a good idea to activate the Remember My
Credentials check box.
However, what if you
activated that option earlier? Fortunately, you’re not stuck because
Windows 7 gives you a way to “unremember” those credentials.
Caution
The General tab of the
Remote Desktop Connection dialog box (select Start, All Programs,
Accessories, Remote Desktop Connection) has a check box named Always Ask
for Credentials. (You may need to click the Options button to see it.)
You might think that you can protect the connection by activating this
check box. However, Windows 7 is still saving the credentials, and all
someone has to do to use them is deactivate the Always Ask for
Credentials check box.
Here are the steps to follow:
1. | Select Start, type credential, and then press Enter. Windows 7 displays the Credential Manager window
|
2. | Click
the credentials you want to delete. Remote Desktop Connection
credentials always begin with TERMSRV (Terminal Server). The Credential
Manager displays the credential details, as shown in Figure 2.
Figure 2. You can use the Credential Manager to remove saved Remote Desktop Connection logon credentials.
|
3. | Click Remove from Vault. Credential Manager asks you to confirm.
|
4. | Click Yes.
|
5. | Repeat steps 2–4 to remove any other saved Remote Desktop Connection credentials.
|
Tip
Another way to remove
saved Remote Desktop Connection credentials is to select Start, All
Programs, Accessories, Remote Desktop Connection. In the Remote Desktop
Connection dialog box, click Options to expand the dialog box, select
the General tab, and then click the Delete link in the Logon Settings
group. Click Yes when Remote Desktop Connection asks you to confirm.