Microsoft fixes issue causing Windows 10 apps to forget passwords

[silversurfer]

Microsoft has addressed a known issue impacting multiple Windows 10 apps and causing them to forget users' passwords after upgrading devices to certain Windows 10, version 2004 builds.
 
The issue was resolved in the KB4598291 release preview cumulative update for all editions of Windows 10 and Windows Server versions 2004 and 20H2.
 
This update also comes with fixes for device deactivation issues and freezing problems while playing games full-screen.

According to Microsoft, KB4598291 also "addresses an issue in which using local Service for User (S4U) affects Data Protection API (DPAPI) credential keys and causes users to sign out unexpectedly."

The reason behind this issue was discovered by Google vulnerability researcher Tavis Ormandy after discovering that scheduled tasks created with the Task Scheduler's S4U (Services For User) option are to be blamed.

Due to a bug in the RPC UBPM (Unified Background Process Manager), Windows 10 would forget passwords by removing saved credentials in the Local Security Authority Subsystem Service (LSASS).
 
This causes the affected apps to either lose login state or sign out users out of their accounts after every system restart.
 
Microsoft first acknowledged the issue causing Outlook and other apps to forget user passwords in a document published on its support website in November 2020.

Read more: https://www.bleepingcomputer.com/news/mi...passwords/