Turn on the auto-complete feature for user names and passwords on forms
Verified with Windows 11 25H2 — updated on July 30, 2026
Supported on: At least Internet Explorer 5.0
Path in the GPO console
User Configuration\Administrative Templates\Windows Components\Internet Explorer Description
This AutoComplete feature can remember and suggest User names and passwords on Forms. If you enable this setting, the user cannot change "User name and passwords on forms" or "prompt me to save passwords". The Auto Complete feature for User names and passwords on Forms will be turned on. You have to decide whether to select "prompt me to save passwords". If you disable this setting the user cannot change "User name and passwords on forms" or "prompt me to save passwords". The Auto Complete feature for User names and passwords on Forms is turned off. The user also cannot opt to be prompted to save passwords. If you do not configure this setting, the user has the freedom of turning on Auto complete for User name and passwords on forms and the option of prompting to save passwords. To display this option, the users open the Internet Options dialog box, click the Contents Tab and click the Settings button.
Registry
HKCU
Software\Policies\Microsoft\Internet Explorer\Main Value name: FormSuggest Passwords
Enabled: FormSuggest Passwords = yes
Disabled: FormSuggest Passwords = no
This policy sets several registry values:
FormSuggest Passwords Control Panel Enabled:
FormSuggest Passwords = 1 Disabled:
FormSuggest Passwords = 1 MDM / Intune (CSP)
./User/Vendor/MSFT/Policy/Config/InternetExplorer/AllowAutoComplete Microsoft Learn documentation Mapping data: Microsoft Learn (CC BY 4.0)
Export Builder
BETAConfigure the state, scope and options, then generate .reg, PowerShell, Intune and SCCM outputs — or add the setting to a multi-setting collection.
These exports write the registry — this is not a managed GPO. ⓘ
.reg file
Windows Registry Editor Version 5.00
; Exported from gporais.com
; Policy: Turn on the auto-complete feature for user names and passwords on forms
; State: Enabled
; Supported on: At least Internet Explorer 5.0
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Main]
"FormSuggest Passwords"="yes"
"FormSuggest PW Ask"=dword:00000000
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel]
"FormSuggest Passwords"=dword:00000001More formats (PowerShell, Intune, SCCM)
PowerShell
# Exported from gporais.com
# Policy: Turn on the auto-complete feature for user names and passwords on forms
# State: Enabled
# Supported on: At least Internet Explorer 5.0
# Warning: In SYSTEM context (the Intune default), HKCU targets the SYSTEM profile. Run this script using the logged-on credentials.
$path = 'HKCU:\Software\Policies\Microsoft\Internet Explorer\Main'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'FormSuggest Passwords' -Value 'yes' -Type String
Set-ItemProperty -Path $path -Name 'FormSuggest PW Ask' -Value 0 -Type DWord
$path = 'HKCU:\Software\Policies\Microsoft\Internet Explorer\Control Panel'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'FormSuggest Passwords' -Value 1 -Type DWordIntune XML
OMA-URI: ./User/Vendor/MSFT/Policy/Config/InternetExplorer/AllowAutoComplete
Data type: String
Value:
<enabled/>
<data id="ChkBox_PasswordAsk" value="0"/>Intune Remediation
# === Detection script ===
# Exported from gporais.com
# Policy: Turn on the auto-complete feature for user names and passwords on forms
# State: Enabled
# Supported on: At least Internet Explorer 5.0
# Warning: In SYSTEM context (the Intune default), HKCU targets the SYSTEM profile. Run this script using the logged-on credentials.
function Test-RegistryValue {
param(
[Parameter(Mandatory = $true)][string]$Path,
[Parameter(Mandatory = $true)][string]$Name,
[object]$Expected,
[ValidateSet('String', 'DWord', 'MultiString')][string]$Kind = 'String',
[switch]$Absent
)
try {
$item = Get-ItemProperty -LiteralPath $Path -Name $Name -ErrorAction Stop
} catch {
return $Absent.IsPresent
}
if ($Absent.IsPresent) { return $false }
$actual = $item.$Name
if ($Kind -eq 'DWord') { return ([int64]$actual) -eq ([int64]$Expected) }
if ($Kind -eq 'MultiString') {
$actualValues = @($actual)
$expectedValues = @($Expected)
if ($actualValues.Count -ne $expectedValues.Count) { return $false }
for ($i = 0; $i -lt $expectedValues.Count; $i++) {
if ([string]$actualValues[$i] -ne [string]$expectedValues[$i]) { return $false }
}
return $true
}
return [string]$actual -eq [string]$Expected
}
$checks = @(
(Test-RegistryValue -Path 'HKCU:\Software\Policies\Microsoft\Internet Explorer\Main' -Name 'FormSuggest Passwords' -Expected 'yes' -Kind String)
(Test-RegistryValue -Path 'HKCU:\Software\Policies\Microsoft\Internet Explorer\Control Panel' -Name 'FormSuggest Passwords' -Expected 1 -Kind DWord)
(Test-RegistryValue -Path 'HKCU:\Software\Policies\Microsoft\Internet Explorer\Main' -Name 'FormSuggest PW Ask' -Expected 0 -Kind DWord)
)
if ($checks -notcontains $false) {
Write-Output 'Compliant'
exit 0
}
Write-Output 'Non-compliant'
exit 1
# === Remediation script ===
# Exported from gporais.com
# Policy: Turn on the auto-complete feature for user names and passwords on forms
# State: Enabled
# Supported on: At least Internet Explorer 5.0
# Warning: In SYSTEM context (the Intune default), HKCU targets the SYSTEM profile. Run this script using the logged-on credentials.
$path = 'HKCU:\Software\Policies\Microsoft\Internet Explorer\Main'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'FormSuggest Passwords' -Value 'yes' -Type String
Set-ItemProperty -Path $path -Name 'FormSuggest PW Ask' -Value 0 -Type DWord
$path = 'HKCU:\Software\Policies\Microsoft\Internet Explorer\Control Panel'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'FormSuggest Passwords' -Value 1 -Type DWordSCCM scripts
# Exported from gporais.com
# Policy: Turn on the auto-complete feature for user names and passwords on forms
# State: Enabled
# Supported on: At least Internet Explorer 5.0
# SCCM Configuration Item guidance:
# Create a Configuration Item of type "Setting: Script".
# Discovery script: use the Detection script below.
# Remediation script: use the Remediation script below.
# Compliance rule: the Discovery script output equals 'Compliant'.
# === Detection script ===
# Exported from gporais.com
# Policy: Turn on the auto-complete feature for user names and passwords on forms
# State: Enabled
# Supported on: At least Internet Explorer 5.0
# Warning: In SYSTEM context (the Intune default), HKCU targets the SYSTEM profile. Run this script using the logged-on credentials.
function Test-RegistryValue {
param(
[Parameter(Mandatory = $true)][string]$Path,
[Parameter(Mandatory = $true)][string]$Name,
[object]$Expected,
[ValidateSet('String', 'DWord', 'MultiString')][string]$Kind = 'String',
[switch]$Absent
)
try {
$item = Get-ItemProperty -LiteralPath $Path -Name $Name -ErrorAction Stop
} catch {
return $Absent.IsPresent
}
if ($Absent.IsPresent) { return $false }
$actual = $item.$Name
if ($Kind -eq 'DWord') { return ([int64]$actual) -eq ([int64]$Expected) }
if ($Kind -eq 'MultiString') {
$actualValues = @($actual)
$expectedValues = @($Expected)
if ($actualValues.Count -ne $expectedValues.Count) { return $false }
for ($i = 0; $i -lt $expectedValues.Count; $i++) {
if ([string]$actualValues[$i] -ne [string]$expectedValues[$i]) { return $false }
}
return $true
}
return [string]$actual -eq [string]$Expected
}
$checks = @(
(Test-RegistryValue -Path 'HKCU:\Software\Policies\Microsoft\Internet Explorer\Main' -Name 'FormSuggest Passwords' -Expected 'yes' -Kind String)
(Test-RegistryValue -Path 'HKCU:\Software\Policies\Microsoft\Internet Explorer\Control Panel' -Name 'FormSuggest Passwords' -Expected 1 -Kind DWord)
(Test-RegistryValue -Path 'HKCU:\Software\Policies\Microsoft\Internet Explorer\Main' -Name 'FormSuggest PW Ask' -Expected 0 -Kind DWord)
)
if ($checks -notcontains $false) {
Write-Output 'Compliant'
exit 0
}
Write-Output 'Non-compliant'
exit 1
# === Remediation script ===
# Exported from gporais.com
# Policy: Turn on the auto-complete feature for user names and passwords on forms
# State: Enabled
# Supported on: At least Internet Explorer 5.0
# Warning: In SYSTEM context (the Intune default), HKCU targets the SYSTEM profile. Run this script using the logged-on credentials.
$path = 'HKCU:\Software\Policies\Microsoft\Internet Explorer\Main'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'FormSuggest Passwords' -Value 'yes' -Type String
Set-ItemProperty -Path $path -Name 'FormSuggest PW Ask' -Value 0 -Type DWord
$path = 'HKCU:\Software\Policies\Microsoft\Internet Explorer\Control Panel'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'FormSuggest Passwords' -Value 1 -Type DWordBuilding a multi-setting collection? Add this setting and generate combined .reg / PowerShell / GPO scripts.