Internet Explorer Auto Complete History is lost after a User Switch (migration) (4254727)

The Internet Explorer Auto Complete History (in addition to other internet locations where username and passwords can be saved such as Outlook Express, pop3 password and etc.) is lost after Users are switched.

Login and Password information is stored in Windows Protected Storage and is not migrated to Active Directory.

When the user(s) save a login and password over the Internet, the Password information is stored in Windows Protected Storage and anything that is stored in Protected Storage (such as information for Auto complete option in IE, Outlook Express passwords, pop3 passwords, etc.) is encrypted and can only be accessed by the Original User. This information is not available when newtarget Users start using the old profiles bacauseit is encrypted with the original objects SID stored underHKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider.

Refer to Microsofts Article - Windows 2000 Services for more information on Protected Storage:
http://www.microsoft.com/windows2000/techinfo/howitworks/management/w2kservices.asp
Protected Storage- provides protected storage for sensitive data, such as private keys, to prevent access by unauthorized services processes or users. (Protected Storage) P-Store is a set of software libraries that allows applications to fetch and retrieve security and other information from a personal storage location, hiding the implementation and details of the storage itself. The storage location provided by this service is secure and protected from modification. P-Store uses the Hash-Based Message Authentication Code (HMAC) and the SHA1 cryptographic hash function to encrypt the users master key. This component requires no configuration. Disabling it will make information protected with this service (for example, private keys) inaccessible to you. P-Store is an earlier service that has been supplanted by the Data Protection API (DPAPI), which is currently the preferred service for protected storage. Unlike DPAPI, the interface to P-Store is not publicly exposed.


Users will have to re-enter the password(s) (and usernames if required) after a Profile Update.

Please also see the following additional articles:

Why arent my passwords for dialup access available after a resource updating?
https://support.quest.com/SUPPORT/index?page=solution&id=SOL18932

Does Migration Manager for Active Directory migrate Internet Explorer Certificates?
https://support.quest.com/SUPPORT/index?page=solution&id=SOL18305