Do not allow passwords to be saved
This machine-wide registry value controls whether users can save passwords with the Windows Remote Desktop Connection client.
since 0.9.8.11
Purpose
Show registry keys (1)
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\DisablePasswordSaving
This machine-wide registry value controls whether users can save passwords with the Windows Remote Desktop Connection client. It is a REG_DWORD value; a value of 1 prevents password saving and disables the corresponding option in the client.
The setting does not block Remote Desktop connections or prohibit password-based authentication. Its direct effect is limited to password storage by Remote Desktop Connection on the affected computer.
Notes
Additional effects
If a user opens an RDP file with Remote Desktop Connection and then saves its settings, the client removes any password previously present in that file.
Security
Preventing local storage reduces the opportunity for another person or malicious software to reuse saved Remote Desktop credentials. It does not protect the remote account's password itself, prevent users from entering passwords manually, or disable other authentication methods.
Microsoft documents removal of an existing password when the relevant RDP file is opened and saved again. The setting should therefore not be treated as a general-purpose purge of every credential already stored on the computer.
Possible side effects
Users cannot retain credentials in Remote Desktop Connection for later sessions. Unless another supported sign-in mechanism supplies the credentials, they must enter them again for subsequent connections. Workflows that depend on a password saved by the client will no longer behave as before.
Notes
The value implements the computer-scoped TS_CLIENT_DISABLE_PASSWORD_SAVING_2 policy from TerminalServer.admx. It governs the Remote Desktop Connection client on the local computer; it does not control password storage on the remote RD Session Host.
Microsoft documentation
Microsoft Learn: RemoteDesktopServices Policy CSP – DoNotAllowPasswordSaving
Microsoft Learn: Azure Policy guest configuration baseline for Windows Server 2025