New reports show that some users have problems with Windows 10 version 2004. Users report that cookies or login data are not saved, especially with the Chrome browser.
One user even mentions that this is due to the S4U task “TASK_LOGON_S4U” in the Task Scheduler.
Such processes are described by Microsoft as follows.
ASK_LOGON_S4U is another option that provides a more secure alternative. It takes advantage of a service for user login (S4U) to perform the task on behalf of the given user, but without having to store the password. Since the task scheduler runs on account of the local system, can create a new S4U session and receive a token that can be used only for an identification, but also for impersonation on the local computer. Normally an S4U token is only good for identification.
Confirmation of the above issue can be found in FeedbackHub and in the forum "Answers". If you are affected by the error, you can check if it is due to this service using PowerShell.
Open PowerShell as Administrator.
Copy and paste the following:
[pastacode manual=”Get-ScheduledTask%20%7C%20foreach%20%7BIf%20((%5Bxml%5D%20(Export-ScheduledTask%20-TaskName%20%24%20_.%20TaskName%20-TaskPath%20%24%20_.%20TaskPath)).%20GetElementsByTagName%20(%22LogonType%22).%20'%23%20text'%20-eq%20%22S4U%22)%20%7B%24%20_.%20TaskName%7D%20%7D” provider=”manual” lang=”php”/]
Στα αποτελέσματα, δείτε εάν έχετε κάποια από αυτές τις διεργασίες. Αν έχετε, προσπαθήστε να τις απενεργοποιήσετε μια προς μια για να βρείτε την διεργασία που εμφανίζει το problem.
The user explains it more in bugs.chromium:
This is because the RPC that UBPM uses to generate the S4U token can sometimes delete your stored credentials in lsass. Among other things, your stored credentials (or rather their hash) are used to generate the key encryptions of the DPAPI user and when they are deleted, lass only uses the hash of the empty string (!!).
Many comments have confirmed that this solution works.