How to hide credential providers from the Windows Logon User Interface

After installation of GoSafe Login Credentials, several credential providers are available to logon from the Windows logon user interface. There are some steps to hide certain credential providers from the Windows logon user interface.

Download: ACP_PDF 2_file_document

This way, you can ensure that only the GoSafe Login Credentials is available for logon.

Step 1: Go to Start Menu and Run (gpedit.msc).

1 2

 

Step 2: Go to the Computer Configuration -> Administrative Templates -> System -> Logon

3

 

Step 3: Right Click on Exclude credential providers and Edit

7

 

Step 4: Click on Enabled and Enters the comma-separated CLSID to exclude multiple credential providers.

4

 

List of default Windows 7 credential providers CLSIDs

Credential Provider CLSID
Generic Provider {25CBB996-92ED-457e-B28C-4774084BD562}
NPProvider {3dd6bec0-8193-4ffe-ae25-e08e39ea4063}
VaultCredProvider {503739d0-4c5e-4cfd-b3ba-d881334f0df2}
Password Provider {6f45dc1e-5384-457a-bc13-2cd81b0d28ed}
Password Provider\LogonPasswordReset {8841d728-1a76-4682-bb6f-a9ea53b4b3ba}
Smartcard Credential Provider {8bf9a910-a8ff-457f-999f-a5ca10b4a885}
Smartcard Pin Provider {94596c7e-3744-41ce-893e-bbf09122f76a}
WinBio Credential Provider {AC3AC249-E820-4343-A65B-377AC634DC09}
CertCredProvider {e74e57b0-6c6d-44d5-9cda-fb2df5ed7435}

This table shows the Latest Windows 7 and Windows 8 GU IDs for these in-box providers:

Password Credential Provider
Windows 7 GUID 6f45dc1e-5384-457a-bc13-2cd81b0d28ed
Windows 8 GUID 60b78e88-ead8-445c-9cfd-0b87f74ea6cd
Smart Card Credential Provider
Windows 7 GUID 8bf9a910-a8ff-457f-999f-a5ca10b4a885
Windows 8 GUID 8fd7e19c-3bf7-489b-a72c-846ab3678c96
Biometric Credential Provider
Windows 7 GUID ac3ac249-e820-4343-a65b-377ac634dc09
Windows 8 GUID bec09223-b018-416d-a0ac-523971b639f5

Step 5: Click on Apply and OK

6

After applying the setting, only the GoSafe Login Credentials is shown during the authentication process.

Note:

  1. Hiding credential providers via group policy only work in windows 7 Professional and Ultimate and Windows 8 Professional and Ultimate. This is not work in Windows Home Basic and Premium version.
  2. Hiding credential providers via group policy also applies to UAC and RunAs authentication dialog boxes.
  3. Hiding the Generic Provider {25CBB996-92ED-457e-B28C-4774084BD562} and the NPProvider {3dd6bec0-8193-4ffe-ae25-e08e39ea4063} may result in a state, where authentication against websites or applications that require “Basic Authentication (HTTP 401 Challenge)” or “Digest Authentication (HTTP 401 Challenge)” may fail.
  4. Make sure you unhide the hidden credential providers again if you plan to remove GoSafe Login Credentials from your system. If you leave them hidden, following removal of GoSafe Login Credentials, the Windows Logon User Interface does not provide you with a credential provider to authenticate,and the Windows credential providers remain hidden.