Within ADUC after turning on View -> "Advanced Features" and "Users [...] as containers" and clicking on a user, the right pane shows the users' objects.

I am trying to delete one called "OTS Protected Storage" (Digital Persona software). Steps:

  1. Right click -> Delete
  2. "Are you sure you want to delete the dpUserSecret named 'OTS Protected Storage'"
  3. Yes
  4. Object is gone
  5. Refresh pane, object is still gone
  6. Check other DCs, object is gone (thus the change replicated)

But as soon as this user logs into any PC again on the domain, the object returns and the data stored also returns.

Am I missing anything?


If I google Digital Persona Software, it looks like software/drivers related to a fingerprint scanner on the PC. The object it's creating on the account is likely storage for the fingerprint metadata for that user.

The object is likely harmless and probably required if you actually want to use fingerprint scanning for AD logon. But if you really want it to stop getting created, you need to get rid of the software that's creating it.

  • The goal is to reset the stored credentials. It's okay if the object comes back eventually without any data, but even the data stored within this object keeps returning. So far I'm at a loss how AD keeps recovering the same data. – Zeno Mar 25 '16 at 16:59
  • I would ask the vendor. – Ryan Bolger Mar 25 '16 at 17:03
  • Yep been working with them, they told me to delete this AD object to do so and it keeps returning. Still working with them, but no solution yet. – Zeno Mar 25 '16 at 17:13

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.