Nice work, you have found the key!
I confirm that this problem is not only yours since I've been able to
reproduce it.
It depends from the Cloning tool that is a sort of Sysprep.
The facts are:
"the user that's active for resealing the device loose the capability to
remember passwords."
This happens even if this user never records a password.
To restore it's memory the SID key in:
HKEY_CURRENT_USER\Software\Microsoft\Protected StorageProvider
should be deleted.
This may be done before fbreseal or after system restart.
( if the key to be deleteted has subkeys, access rights must be extended to
them using the Advanced button)
All users defined before and after reseal are kept unchanged.
These are the repro steps:
Start an image set for Autologon with users "Administrator" and "test".
Log as Administrator
Give command "fbreseal -keepall"
Restart and wait until system is ready, "Administrator" is now logged in.
Using IE go into a password protected site asking to remember the psw.
Go out try to access again. You are requested to insert the password again,
so it's has been forgotten.
Logoff and logon as "test" user, try to enter the protected site.
The password is kept.
Create a new user "myself". Logging on as "myself" check that psw is still
kept.
Log on again as Administrator. Stop Protected Storage Service, delete the
SID key in registry "protectedStorageProvider" and restart the service.
Access to the protected site using IE and the password is now kept.
Raffaele
Hello guys, I found the solution in
http://support.microsoft.com/kb/815229
It also happen in XP Pro.
I try the resolution and it works fine.
Thank you Crus, you give me a good clue fro this problem.
When using sysprep.exe, passwords cannot be saved
CAUSE
If you run the sysprep tool, the SID is changed, but the SID change
causes the Protected Storage Service to malfunction.
RESOLUTION
To work around this behavior, delete keys beginning with the letter
"S" within the following registry:
HKEY_CURRENT_USER\Software\Microsoft\Protected Storage Provider
* Close Protected Storage Service
* Run REGEDT32.EXE
* Choose HKEY_CURRENT_USER\Software\Microsoft\Protected Storage
Provider
* Delete keys beginning with the letter "S"
* Go to the Security menu, and select Authorize Access
* Click Add, and add the current user. Choose Full Control for
authorized access.
* Click Delete, and delete the key itself
* Restart computer
If the above steps are completed prior to running the sysprep tool,
users added after the fact will be able to save passwords
successfully.