I installed Windows 7 RC on a computer at work, and joined it to our domain ok. I can log in fine, but any time I try to access a network resourcce, it says Windows needs my current credentials. I tried adding my domain, username and password to the credentials manager as both a generic and a Windows one, but it continues to prompt me for my credentials, then immediatly forget them.

Run the following from an elevated command prompt (right-click -> Run as administrator):reg query HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\disabledomaincredsIf the key exists (with a value of 1)it means your company has disabled storing domain credentials through group policy. Value Name: disabledomaincreds Value Type: REG_DWORD Values: 0 = allow domain credentials to be stored 1 = do not store domain credentials

HeyI checked, and it's set to 0.

Are you part of the domainor just "connected" to the network?

No, I'm a full member of the domain. My computer is joined and says "member of: mydomain.edu"

Hello The White Rabbit,Has your issue been resolved yet? Please let us know.

No, it's still very much a problem. I applied the security update to CapCOM today and it didn't help. All other updates are applied.Every time I try to access a network resource, even my shared space on the server, it prompts me for passwords, and it keeps saying Windows needs my current credentials.Funny thing is my friend here has Windows 7 Beta, and it works fine, he can access any network resources without being prompted constantly to lock his computer. So something broke in the RC.

Hello The White Rabbit,Are you behind a proxy on your domain? I have experienced this same issue when logging in through a proxy. I give my user name and password and in 5 seconds it will ask again and every 5 seconds there after.

I found the issue.Someone had set a flag on my account to use DES encryption to store the password. I tried anouther account that didn't use DES and it works fine on the domain. Windows 7 people, please add support for DES encrypted user accounts.

Do we have a solution for this issue yet. It appears to mainly happen when you are doing a fresh install and not an upgrade.

I am having this same issue however with Windows XP Pro, sp3. It just all of a suddent started a few weeks ago. Not sure what changed? We run Win 2000 server (old I know) It just keeps asking for current window credentials over and over and tells you to do a ctrl/alt/del to fix it but that doesn't help. We then lose all network functions. Help?? THANKS!

This worked for me. open DSA.msc account properties and scroll down to remove the DES check box.

Where do i find the dsa.msc account? In AD? Sorry - not sure. Thank you!!!!Tina

Ok - so I know the dsa.msc opens the AD, but where do I go to find the DES check box? thank you!

never mind found it - however for this user, DES is not checked??

Any other ideas as to why this is happening. It shuts down all printing and network resources. Sometimes restarting helps, sometimes it doesn't, sometimes releasing and renewing ip's help, sometimes not - just random and weird. I have ran this network for 15 years and have never seen this so wasn't sure why all of a sudden it would start doing this. Thanks for ANY help!!

Please post the results of ipconfig /all from a domain controller and from an affected work station.Kerry Brown MS-MVP - Windows Desktop Experience

From affected machine: ip - 10.73.76.45 subnet 255.255.0.0 gateway 10.73.73.1 dhcp server 10.73.73.12 dns servers 10.73.73.33 and 10.73.73.27 from dc: ip 10.73.73.3 subnet 255.255.0.0 gateway 10.73.73.1 dns 10.73..73.33 and 10.73.73.27anything else you need?

Looks OK assuming the DNS servers are AD integrated. What are the results when you lookup a server with a share on it?nslookup servernamealso ping the same server.Kerry Brown MS-MVP - Windows Desktop Experience

ping comes back great at the address and the nslookup is the same.

I was thinking a DNS problem but it looks like that's not it. I'm out of ideas.Kerry Brown MS-MVP - Windows Desktop Experience

Yeah - me too. One of my teachers is very frustrated. He just emailed me this morning that it happens a lot when he tries to print to a shared printer - one running off another machine and not directly hooked to a drop. So i'm going to look at that angle. it is really really weird. i am looking at my wireless radio setup as well - it happens wireless a lot. thanks for your ideas.

for kerberos issue in win7, this could be the culprit. please check this out http://technet.microsoft.com/en-us/library/dd560670%28WS.10%29.aspx and make the changes to enable DES encryption.

I can confirm this solution, and that it applies to Windows Server 2008 as well as Windows 7 Pro 64-bit. Here's a copy of my posting in another forum with the details: I found a solution--at least in our scenario. Background: we are not using a VPN, nor are we using SmartCards; however, recently, I started getting this balloon popup from the system tray with the following message: "Windows needs your current credentials. Please lock this computer, then unlock it using your most recent password or smartcard." Searching around the web, I found a forum posting about the user account setting "Use Kerberos DES encryption types for this account" and how it can cause this error popup under certain circumstances. When I saw that, I knew it was probably the source of my problem, since I had recently enabled that option on my account (trying to be clever and not really knowing for sure whether it was needed). Sure enough, I removed the Kerberos DES encryption types setting from my account and the balloon popup messages stopped. This setting is found in Active Directory Users and Computers (on a Domain Controller): look for the user account affected in the Users folder, select the user account, Right-click, then select Properties; look on the properties Account tab under "Account options:" in the list box. Scroll down and Clear the checkbox for the option "Use Kerberos DES encryption types for this account" and click OK. Then logoff, and logon again. It fixed it for me. Hope this helps. Dave Kelly