Where are installer preferences stored?

[dude0001]

I'm having an issue where every time I restart my machine, it seems like some settings I chose in the installer are getting reverted. Specifically, I want to use schannel to allow Git to trust certs in the Windows certificate store to trust a company CA we have for self-signed certs. It works like a charm on the initial install. But as soon as I restart Windows, something changes and Git no longer trusts certs deployed to the Windows Certificate store again. The workaround for me is to uninstall Git for Windows and reinstall it with schannel enabled again. My theory is something on our network, group policy or otherwise, is changing the settings and breaking my development environment. I'd like to review whether these settings are not getting wiped out after a restart. Open to any other ideas to troubleshoot as well.

I have put the following in my .gitconfig, but it does not seem to be effective and the installer doesn't add this entry. So there must be something else Git for Windows looks at for this or I do not have the correct .gitconfig entry.

[http]
	sslBackend = schannel

[dscho]

[http]
sslBackend = schannel

This is the correct way to configure this. If you are in doubt whether that setting is still in effect, call git config --show-scope http.sslbackend.

If you still doubt that Git uses that backend, run your git fetch/git push after setting the environment variable GIT_TRACE_CURL=1. The telltale looks somewhat like this (for me, it was the 15th line of the output in a quick test):

08:22:52.321691 http.c:703              == Info: schannel: remote party requests renegotiation

If, for some reason, you're using the OpenSSL backend, you will see something like this instead:

08:24:03.306409 http.c:676              => Send SSL data, 0000000005 bytes (0x00000005)

Having said that, I suspect that the problem is not so much the backend used by Git, but I suspect that the store somehow loses that cert instead. Hopefully you can figure it out!

[dude0001]

These troubleshooting steps are helpful. I'll have my team try this and report back here with additional troubleshooting information if we still cannot figure out the root cause.

This may not be an issue with the installer, but I'm verily certain it is not an issue of the Windows Certificate Store losing the cert. All HTTPs traffic on our machines is routed through this service as sort of a proxy for packet inspection of otherwise encrypted traffic. We only see the issue with Git, and only on Windows (we have WSL and MacOS environments that do not experience this). If the store was losing the certificate all my development tools would start failing with a similar issue and I would see warnings of invalid certs in my browser, etc. And reinstalling Git for Windows would not re-add the certificate to the store as this is something proprietary to our organization.

[dude0001]

Everything was working fine yesterday. After starting up this morning, I am seeing the issue as usual. Here is what I see. After further thought on this, it looks like I'm losing connection to the Windows Credential Manager store, and not the Windows Certificate Store.

I normally do not get prompted for a password after the first interaction with a repo as credentials are stored in the Windows Credential Manager. I am also usually prompted in a web browser pop-up to SSO to AzDO. When I'm seeing the issue after a restart I get prompted in the terminal for credentials, and my normal credentials do not work.

>git push
fatal: Unable to persist credentials with the 'wincredman' credential store.
See https://aka.ms/gcm/credstores for more information.
Username for 'https://my_tenant.visualstudio.com/My Project/_git/my_repo': mlambert@my_domain.com
Password for 'https://mlambert@my_domain.com@my_tenant.visualstudio.com/My Project/_git/my_repo':
fatal: Unable to persist credentials with the 'wincredman' credential store.
See https://aka.ms/gcm/credstores for more information.
fatal: Authentication failed for 'https://my_tenant.visualstudio.com/My%20Project/_git/my_repo/'

>git config --show-scope http.sslbackend
global  schannel

This does make me think the schannel setting in my user scoped .gitconfig is getting picked up and is effective.

>set GIT_TRACE_CURL=1
>git push
09:09:30.401347 http.c:703              == Info: Couldn't find host my_tenant.visualstudio.com in the (nil) file; using defaults
09:09:30.423345 http.c:703              == Info:   Trying 13.107.43.18:443...
09:09:30.441345 http.c:703              == Info: Connected to my_tenant.visualstudio.com (13.107.43.18) port 443 (#0)
09:09:30.441345 http.c:703              == Info: schannel: disabled automatic use of client certificate
09:09:30.482729 http.c:650              => Send header, 0000000248 bytes (0x000000f8)
09:09:30.482729 http.c:662              => Send header: GET /My%20Project/_git/my_repo/info/refs?service=git-receive-pack HTTP/1.1
09:09:30.482729 http.c:662              => Send header: Host: my_tenant.visualstudio.com
09:09:30.482729 http.c:662              => Send header: User-Agent: git/2.38.1.windows.1
09:09:30.482729 http.c:662              => Send header: Accept: */*
09:09:30.482729 http.c:662              => Send header: Accept-Encoding: deflate, gzip, br, zstd
09:09:30.482729 http.c:662              => Send header: Pragma: no-cache
09:09:30.482729 http.c:662              => Send header:
09:09:30.556598 http.c:703              == Info: schannel: failed to decrypt data, need more data
09:09:30.556598 http.c:703              == Info: schannel: failed to decrypt data, need more data
09:09:30.557598 http.c:703              == Info: Mark bundle as not supporting multiuse
09:09:30.557598 http.c:650              <= Recv header, 0000000027 bytes (0x0000001b)
09:09:30.557598 http.c:662              <= Recv header: HTTP/1.1 401 Unauthorized
09:09:30.557598 http.c:650              <= Recv header, 0000000024 bytes (0x00000018)
09:09:30.557598 http.c:662              <= Recv header: Cache-Control: private
09:09:30.557598 http.c:650              <= Recv header, 0000000023 bytes (0x00000017)
09:09:30.557598 http.c:662              <= Recv header: Content-Length: 89642
09:09:30.557598 http.c:650              <= Recv header, 0000000025 bytes (0x00000019)
09:09:30.557598 http.c:662              <= Recv header: Content-Type: text/html
09:09:30.557598 http.c:650              <= Recv header, 0000000124 bytes (0x0000007c)
09:09:30.557598 http.c:662              <= Recv header: P3P: CP="CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR LOC CNT"
09:09:30.557598 http.c:650              <= Recv header, 0000000115 bytes (0x00000073)
09:09:30.557598 http.c:662              <= Recv header: WWW-Authenticate: Bearer authorization_uri=https://login.microsoftonline.com/64fc4b7c-0532-4da1-837a-3998119205c2
09:09:30.557598 http.c:650              <= Recv header, 0000000067 bytes (0x00000043)
09:09:30.557598 http.c:662              <= Recv header: WWW-Authenticate: Basic realm="https://tfs.app.visualstudio.com/"
09:09:30.557598 http.c:650              <= Recv header, 0000000033 bytes (0x00000021)
09:09:30.557598 http.c:662              <= Recv header: WWW-Authenticate: TFS-Federated
09:09:30.557598 http.c:650              <= Recv header, 0000000055 bytes (0x00000037)
09:09:30.558273 http.c:662              <= Recv header: X-TFS-ProcessId: f2458f75-3647-4566-a67c-7320279be6c2
09:09:30.558273 http.c:650              <= Recv header, 0000000064 bytes (0x00000040)
09:09:30.558273 http.c:662              <= Recv header: Strict-Transport-Security: max-age=31536000; includeSubDomains
09:09:30.558273 http.c:650              <= Recv header, 0000000050 bytes (0x00000032)
09:09:30.558273 http.c:662              <= Recv header: ActivityId: f2db25e7-a5e6-47a9-b172-03f03bbe6ce6
09:09:30.558273 http.c:650              <= Recv header, 0000000053 bytes (0x00000035)
09:09:30.558273 http.c:662              <= Recv header: X-TFS-Session: f2db25e7-a5e6-47a9-b172-03f03bbe6ce6
09:09:30.558273 http.c:650              <= Recv header, 0000000051 bytes (0x00000033)
09:09:30.558273 http.c:662              <= Recv header: X-VSS-E2EID: f2db25e7-a5e6-47a9-b172-03f03bbe6ce6
09:09:30.558273 http.c:650              <= Recv header, 0000000064 bytes (0x00000040)
09:09:30.558273 http.c:662              <= Recv header: X-VSS-SenderDeploymentId: 52b4b0e6-4e32-471a-b490-dba776dd4096
09:09:30.558273 http.c:650              <= Recv header, 0000000029 bytes (0x0000001d)
09:09:30.558273 http.c:662              <= Recv header: X-FRAME-OPTIONS: SAMEORIGIN
09:09:30.558273 http.c:650              <= Recv header, 0000000055 bytes (0x00000037)
09:09:30.558273 http.c:662              <= Recv header: X-TFS-FedAuthRealm: https://tfs.app.visualstudio.com/
09:09:30.558273 http.c:650              <= Recv header, 0000000065 bytes (0x00000041)
09:09:30.558778 http.c:662              <= Recv header: X-TFS-FedAuthIssuer: https://my_tenant.visualstudio.com/
09:09:30.558778 http.c:650              <= Recv header, 0000000079 bytes (0x0000004f)
09:09:30.558778 http.c:662              <= Recv header: X-VSS-AuthorizationEndpoint: https://my_tenant.vssps.visualstudio.com/
09:09:30.558778 http.c:650              <= Recv header, 0000000060 bytes (0x0000003c)
09:09:30.558778 http.c:662              <= Recv header: X-VSS-ResourceTenant: 64fc4b7c-0532-4da1-837a-3998119205c2
09:09:30.558778 http.c:650              <= Recv header, 0000000710 bytes (0x000002c6)
09:09:30.558778 http.c:662              <= Recv header: X-TFS-SoapException: %3C%3Fxml%20version%3D%221.0%22%20encoding%3D%22utf-8%22%3F%3E%3Csoap%3AEnvelope%20xmlns%3Asoap%3D%22http%3A%2F%2Fwww.w3.org%2F2003%2F05%2Fsoap-envelope%22%3E%3Csoap%3ABody%3E%3Csoap%3AFault%3E%3Csoap%3ACode%3E%3Csoap%3AValue%3Esoap%3AReceiver%3C%2Fsoap%3AValue%3E%3Csoap%3ASubcode%3E%3Csoap%3AValue%3EUnauthorizedRequestException%3C%2Fsoap%3AValue%3E%3C%2Fsoap%3ASubcode%3E%3C%2Fsoap%3ACode%3E%3Csoap%3AReason%3E%3Csoap%3AText%20xml%3Alang%3D%22en%22%3ETF400813%3A%20The%20user%20%27aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa%27%20is%20not%20authorized%20to%20access%20this%20resource.%3C%2Fsoap%3AText%3E%3C%2Fsoap%3AReason%3E%3C%2Fsoap%3AFault%3E%3C%2Fsoap%3ABody%3E%3C%2Fsoap%3AEnvelope%3E
09:09:30.558778 http.c:650              <= Recv header, 0000000148 bytes (0x00000094)
09:09:30.558778 http.c:662              <= Recv header: X-TFS-ServiceError: TF400813%3A%20The%20user%20%27aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa%27%20is%20not%20authorized%20to%20access%20this%20resource.
09:09:30.558778 http.c:650              <= Recv header, 0000000079 bytes (0x0000004f)
09:09:30.558778 http.c:662              <= Recv header: X-VSS-S2STargetService: 00000002-0000-8888-8000-000000000000/visualstudio.com
09:09:30.558778 http.c:650              <= Recv header, 0000000594 bytes (0x00000252)
09:09:30.558778 http.c:662              <= Recv header: X-TFS-FedAuthRedirect: https://spsprodeus24.vssps.visualstudio.com/_signin?realm=my_tenant.visualstudio.com&reply_to=https%3A%2F%2Fmy_tenant.visualstudio.com%2FMy%2520Project%2F_git%2Fmy_repo%2Finfo%2Frefs%3Fservice%3Dgit-receive-pack&redirect=1&hid=c9f4c823-47c5-44a2-9d6a-3cfd00458752&context=eyJodCI6MiwiaGlkIjoiMjFiZDUwNjUtMGI4Mi00Mzk4LTlhMjctMGExMjIwNjAzMzAxIiwicXMiOnt9LCJyciI6IiIsInZoIjoiIiwiY3YiOiIiLCJjcyI6IiJ90#ctx=eyJTaWduSW5Db29raWVEb21haW5zIjpbImh0dHBzOi8vbG9naW4ubWljcm9zb2Z0b25saW5lLmNvbSIsImh0dHBzOi8vbG9naW4ubWljcm9zb2Z0b25saW5lLmNvbSJdfQ2
09:09:30.558778 http.c:650              <= Recv header, 0000000068 bytes (0x00000044)
09:09:30.558778 http.c:662              <= Recv header: Request-Context: appId=cid-v1:14a064fe-0736-4753-ac67-ec119a6d0dfb
09:09:30.558778 http.c:650              <= Recv header, 0000000048 bytes (0x00000030)
09:09:30.558778 http.c:662              <= Recv header: Access-Control-Expose-Headers: Request-Context
09:09:30.558778 http.c:650              <= Recv header, 0000000033 bytes (0x00000021)
09:09:30.558778 http.c:662              <= Recv header: X-Content-Type-Options: nosniff
09:09:30.558778 http.c:650              <= Recv header, 0000000025 bytes (0x00000019)
09:09:30.558778 http.c:662              <= Recv header: X-Cache: CONFIG_NOCACHE
09:09:30.558778 http.c:650              <= Recv header, 0000000106 bytes (0x0000006a)
09:09:30.558778 http.c:662              <= Recv header: X-MSEdge-Ref: Ref A: F1772E431FAB4BBC8608E4107E1F6E87 Ref B: CH1AA2020614011 Ref C: 2022-12-07T14:09:30Z
09:09:30.558778 http.c:650              <= Recv header, 0000000037 bytes (0x00000025)
09:09:30.558778 http.c:662              <= Recv header: Date: Wed, 07 Dec 2022 14:09:29 GMT
09:09:30.558778 http.c:650              <= Recv header, 0000000002 bytes (0x00000002)
09:09:30.558778 http.c:662              <= Recv header:
09:09:30.558778 http.c:676              <= Recv data, 0000000399 bytes (0x0000018f)
09:09:30.558778 http.c:691              <= Recv data: omitted
09:09:30.562783 http.c:703              == Info: schannel: failed to decrypt data, need more data
09:09:30.562783 http.c:676              <= Recv data, 0000013203 bytes (0x00003393)
09:09:30.562783 http.c:691              <= Recv data: omitted
09:09:30.573784 http.c:703              == Info: schannel: failed to decrypt data, need more data
09:09:30.573784 http.c:703              == Info: schannel: failed to decrypt data, need more data
09:09:30.574783 http.c:676              <= Recv data, 0000008192 bytes (0x00002000)
09:09:30.574783 http.c:691              <= Recv data: omitted
09:09:30.588780 http.c:703              == Info: schannel: failed to decrypt data, need more data
09:09:30.588780 http.c:703              == Info: schannel: failed to decrypt data, need more data
09:09:30.588780 http.c:703              == Info: schannel: failed to decrypt data, need more data
09:09:30.588780 http.c:703              == Info: schannel: failed to decrypt data, need more data
09:09:30.589665 http.c:703              == Info: schannel: failed to decrypt data, need more data
09:09:30.589665 http.c:676              <= Recv data, 0000008192 bytes (0x00002000)
09:09:30.589665 http.c:691              <= Recv data: omitted
09:09:30.594479 http.c:676              <= Recv data, 0000016384 bytes (0x00004000)
09:09:30.594479 http.c:691              <= Recv data: omitted
09:09:30.602479 http.c:676              <= Recv data, 0000016384 bytes (0x00004000)
09:09:30.602479 http.c:691              <= Recv data: omitted
09:09:30.609649 http.c:703              == Info: schannel: failed to decrypt data, need more data
09:09:30.609649 http.c:676              <= Recv data, 0000008192 bytes (0x00002000)
09:09:30.609649 http.c:691              <= Recv data: omitted
09:09:30.654490 http.c:703              == Info: schannel: failed to decrypt data, need more data
09:09:30.654490 http.c:703              == Info: schannel: failed to decrypt data, need more data
09:09:30.654490 http.c:676              <= Recv data, 0000008192 bytes (0x00002000)
09:09:30.654490 http.c:691              <= Recv data: omitted
09:09:30.658490 http.c:676              <= Recv data, 0000002312 bytes (0x00000908)
09:09:30.658490 http.c:691              <= Recv data: omitted
09:09:30.659752 http.c:703              == Info: Connection #0 to host my_tenant.visualstudio.com left intact
fatal: Unable to persist credentials with the 'wincredman' credential store.
See https://aka.ms/gcm/credstores for more information.
bash: line 1: /dev/tty: No such device or address
error: failed to execute prompt script (exit code 1)
fatal: could not read Username for 'https://my_tenant.visualstudio.com/My Project/_git/my_repo': No such file or directory

I then go to uninstall Git for Windows and reinstall. The reason I think this is an install settings issue is when I go to reinstall, my installer selections are not persisted. That might be a red herring and happening because I uninstall first. But I'd like to figure out how to check before I uninstall.

For example, I always select schannel but it isn't selected when I reinstall.

I also always select core.autocrlf=false that is also lost.

I do not see an option for selecting Windows Credential Manager in the installer, but I do see the default of using the cross-platform credentials manager which is still selected during reinstall.

After the reinstall it works again with no other changes or having to authenticate.

>git config --show-scope http.sslbackend
global  schannel

>git push
Enumerating objects: 5, done.
Counting objects: 100% (5/5), done.
Delta compression using up to 16 threads
Compressing objects: 100% (3/3), done.
Writing objects: 100% (3/3), 802 bytes | 24.00 KiB/s, done.
Total 3 (delta 2), reused 0 (delta 0), pack-reused 0
remote: Analyzing objects... (3/3) (230 ms)
remote: Checking path lengths for refs and files...  done (1 ms)
remote: Storing packfile... done (69 ms)
remote: Storing index... done (77 ms)
To https://my_tenant.visualstudio.com/My%20Project/_git/my_repo
   219abee..5cec3f2  feature/47505-black-formatter -> feature/47505-black-formatter

>set GIT_TRACE_CURL=1
>git push
10:32:49.381741 http.c:703              == Info: Couldn't find host my_tenant.visualstudio.com in the (nil) file; using defaults
10:32:49.435739 http.c:703              == Info:   Trying 13.107.42.18:443...
10:32:49.454163 http.c:703              == Info: Connected to my_tenant.visualstudio.com (13.107.42.18) port 443 (#0)
10:32:49.454163 http.c:703              == Info: schannel: disabled automatic use of client certificate
10:32:49.509313 http.c:650              => Send header, 0000000248 bytes (0x000000f8)
10:32:49.509313 http.c:662              => Send header: GET /My%20Project/_git/my_repo/info/refs?service=git-receive-pack HTTP/1.1
10:32:49.509313 http.c:662              => Send header: Host: my_tenant.visualstudio.com
10:32:49.516312 http.c:662              => Send header: User-Agent: git/2.38.1.windows.1
10:32:49.516312 http.c:662              => Send header: Accept: */*
10:32:49.516312 http.c:662              => Send header: Accept-Encoding: deflate, gzip, br, zstd
10:32:49.516312 http.c:662              => Send header: Pragma: no-cache
10:32:49.516312 http.c:662              => Send header:
10:32:49.556310 http.c:703              == Info: schannel: failed to decrypt data, need more data
10:32:49.557312 http.c:703              == Info: schannel: failed to decrypt data, need more data
10:32:49.557437 http.c:703              == Info: schannel: failed to decrypt data, need more data
10:32:49.557437 http.c:703              == Info: schannel: failed to decrypt data, need more data
10:32:49.557437 http.c:703              == Info: Mark bundle as not supporting multiuse
10:32:49.557437 http.c:650              <= Recv header, 0000000027 bytes (0x0000001b)
10:32:49.557437 http.c:662              <= Recv header: HTTP/1.1 401 Unauthorized
10:32:49.557437 http.c:650              <= Recv header, 0000000024 bytes (0x00000018)
10:32:49.557437 http.c:662              <= Recv header: Cache-Control: private
10:32:49.557437 http.c:650              <= Recv header, 0000000023 bytes (0x00000017)
10:32:49.558314 http.c:662              <= Recv header: Content-Length: 89642
10:32:49.558314 http.c:650              <= Recv header, 0000000025 bytes (0x00000019)
10:32:49.558314 http.c:662              <= Recv header: Content-Type: text/html
10:32:49.558314 http.c:650              <= Recv header, 0000000124 bytes (0x0000007c)
10:32:49.558314 http.c:662              <= Recv header: P3P: CP="CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR LOC CNT"
10:32:49.558314 http.c:650              <= Recv header, 0000000115 bytes (0x00000073)
10:32:49.558314 http.c:662              <= Recv header: WWW-Authenticate: Bearer authorization_uri=https://login.microsoftonline.com/64fc4b7c-0532-4da1-837a-3998119205c2
10:32:49.558314 http.c:650              <= Recv header, 0000000067 bytes (0x00000043)
10:32:49.558314 http.c:662              <= Recv header: WWW-Authenticate: Basic realm="https://tfs.app.visualstudio.com/"
10:32:49.558314 http.c:650              <= Recv header, 0000000033 bytes (0x00000021)
10:32:49.558314 http.c:662              <= Recv header: WWW-Authenticate: TFS-Federated
10:32:49.558314 http.c:650              <= Recv header, 0000000055 bytes (0x00000037)
10:32:49.559312 http.c:662              <= Recv header: X-TFS-ProcessId: b3d91dd2-832d-4de8-b4ea-ab96e94b35c0
10:32:49.559312 http.c:650              <= Recv header, 0000000064 bytes (0x00000040)
10:32:49.559312 http.c:662              <= Recv header: Strict-Transport-Security: max-age=31536000; includeSubDomains
10:32:49.559312 http.c:650              <= Recv header, 0000000050 bytes (0x00000032)
10:32:49.559312 http.c:662              <= Recv header: ActivityId: 9f05b925-16d3-454e-b792-e2024f99998d
10:32:49.559312 http.c:650              <= Recv header, 0000000053 bytes (0x00000035)
10:32:49.559835 http.c:662              <= Recv header: X-TFS-Session: 9f05b925-16d3-454e-b792-e2024f99998d
10:32:49.560016 http.c:650              <= Recv header, 0000000051 bytes (0x00000033)
10:32:49.560016 http.c:662              <= Recv header: X-VSS-E2EID: 9f05b925-16d3-454e-b792-e2024f99998d
10:32:49.560016 http.c:650              <= Recv header, 0000000064 bytes (0x00000040)
10:32:49.560016 http.c:662              <= Recv header: X-VSS-SenderDeploymentId: 52b4b0e6-4e32-471a-b490-dba776dd4096
10:32:49.560016 http.c:650              <= Recv header, 0000000029 bytes (0x0000001d)
10:32:49.560016 http.c:662              <= Recv header: X-FRAME-OPTIONS: SAMEORIGIN
10:32:49.560016 http.c:650              <= Recv header, 0000000055 bytes (0x00000037)
10:32:49.560841 http.c:662              <= Recv header: X-TFS-FedAuthRealm: https://tfs.app.visualstudio.com/
10:32:49.560841 http.c:650              <= Recv header, 0000000065 bytes (0x00000041)
10:32:49.560841 http.c:662              <= Recv header: X-TFS-FedAuthIssuer: https://my_tenant.visualstudio.com/
10:32:49.560841 http.c:650              <= Recv header, 0000000079 bytes (0x0000004f)
10:32:49.560841 http.c:662              <= Recv header: X-VSS-AuthorizationEndpoint: https://my_tenant.vssps.visualstudio.com/
10:32:49.560841 http.c:650              <= Recv header, 0000000060 bytes (0x0000003c)
10:32:49.560841 http.c:662              <= Recv header: X-VSS-ResourceTenant: 64fc4b7c-0532-4da1-837a-3998119205c2
10:32:49.560841 http.c:650              <= Recv header, 0000000710 bytes (0x000002c6)
10:32:49.560841 http.c:662              <= Recv header: X-TFS-SoapException: %3C%3Fxml%20version%3D%221.0%22%20encoding%3D%22utf-8%22%3F%3E%3Csoap%3AEnvelope%20xmlns%3Asoap%3D%22http%3A%2F%2Fwww.w3.org%2F2003%2F05%2Fsoap-envelope%22%3E%3Csoap%3ABody%3E%3Csoap%3AFault%3E%3Csoap%3ACode%3E%3Csoap%3AValue%3Esoap%3AReceiver%3C%2Fsoap%3AValue%3E%3Csoap%3ASubcode%3E%3Csoap%3AValue%3EUnauthorizedRequestException%3C%2Fsoap%3AValue%3E%3C%2Fsoap%3ASubcode%3E%3C%2Fsoap%3ACode%3E%3Csoap%3AReason%3E%3Csoap%3AText%20xml%3Alang%3D%22en%22%3ETF400813%3A%20The%20user%20%27aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa%27%20is%20not%20authorized%20to%20access%20this%20resource.%3C%2Fsoap%3AText%3E%3C%2Fsoap%3AReason%3E%3C%2Fsoap%3AFault%3E%3C%2Fsoap%3ABody%3E%3C%2Fsoap%3AEnvelope%3E
10:32:49.560841 http.c:650              <= Recv header, 0000000148 bytes (0x00000094)
10:32:49.560841 http.c:662              <= Recv header: X-TFS-ServiceError: TF400813%3A%20The%20user%20%27aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa%27%20is%20not%20authorized%20to%20access%20this%20resource.
10:32:49.560841 http.c:650              <= Recv header, 0000000079 bytes (0x0000004f)
10:32:49.561838 http.c:662              <= Recv header: X-VSS-S2STargetService: 00000002-0000-8888-8000-000000000000/visualstudio.com
10:32:49.561838 http.c:650              <= Recv header, 0000000594 bytes (0x00000252)
10:32:49.561838 http.c:662              <= Recv header: X-TFS-FedAuthRedirect: https://spsprodeus24.vssps.visualstudio.com/_signin?realm=my_tenant.visualstudio.com&reply_to=https%3A%2F%2Fmy_tenant.visualstudio.com%2FAppDev%2520Team%2F_git%2Fmy_repo%2Finfo%2Frefs%3Fservice%3Dgit-receive-pack&redirect=1&hid=c9f4c823-47c5-44a2-9d6a-3cfd00458752&context=eyJodCI6MiwiaGlkIjoiMjFiZDUwNjUtMGI4Mi00Mzk4LTlhMjctMGExMjIwNjAzMzAxIiwicXMiOnt9LCJyciI6IiIsInZoIjoiIiwiY3YiOiIiLCJjcyI6IiJ90#ctx=eyJTaWduSW5Db29raWVEb21haW5zIjpbImh0dHBzOi8vbG9naW4ubWljcm9zb2Z0b25saW5lLmNvbSIsImh0dHBzOi8vbG9naW4ubWljcm9zb2Z0b25saW5lLmNvbSJdfQ2
10:32:49.561838 http.c:650              <= Recv header, 0000000068 bytes (0x00000044)
10:32:49.561838 http.c:662              <= Recv header: Request-Context: appId=cid-v1:14a064fe-0736-4753-ac67-ec119a6d0dfb
10:32:49.561838 http.c:650              <= Recv header, 0000000048 bytes (0x00000030)
10:32:49.561838 http.c:662              <= Recv header: Access-Control-Expose-Headers: Request-Context
10:32:49.561838 http.c:650              <= Recv header, 0000000033 bytes (0x00000021)
10:32:49.561838 http.c:662              <= Recv header: X-Content-Type-Options: nosniff
10:32:49.561838 http.c:650              <= Recv header, 0000000025 bytes (0x00000019)
10:32:49.561838 http.c:662              <= Recv header: X-Cache: CONFIG_NOCACHE
10:32:49.561838 http.c:650              <= Recv header, 0000000102 bytes (0x00000066)
10:32:49.562837 http.c:662              <= Recv header: X-MSEdge-Ref: Ref A: B93D82D2531545718F9D3E15A7B8D9ED Ref B: CHGEDGE1917 Ref C: 2022-12-07T15:32:49Z
10:32:49.562837 http.c:650              <= Recv header, 0000000037 bytes (0x00000025)
10:32:49.562837 http.c:662              <= Recv header: Date: Wed, 07 Dec 2022 15:32:48 GMT
10:32:49.562837 http.c:650              <= Recv header, 0000000002 bytes (0x00000002)
10:32:49.562837 http.c:662              <= Recv header:
10:32:49.562837 http.c:676              <= Recv data, 0000004021 bytes (0x00000fb5)
10:32:49.562837 http.c:691              <= Recv data: omitted
10:32:49.567836 http.c:703              == Info: schannel: failed to decrypt data, need more data
10:32:49.568836 http.c:676              <= Recv data, 0000009581 bytes (0x0000256d)
10:32:49.568836 http.c:691              <= Recv data: omitted
10:32:49.580839 http.c:676              <= Recv data, 0000016384 bytes (0x00004000)
10:32:49.580839 http.c:691              <= Recv data: omitted
10:32:49.601837 http.c:676              <= Recv data, 0000016384 bytes (0x00004000)
10:32:49.601837 http.c:691              <= Recv data: omitted
10:32:49.623205 http.c:676              <= Recv data, 0000016384 bytes (0x00004000)
10:32:49.623205 http.c:691              <= Recv data: omitted
10:32:49.642836 http.c:676              <= Recv data, 0000016384 bytes (0x00004000)
10:32:49.642836 http.c:691              <= Recv data: omitted
10:32:49.661836 http.c:676              <= Recv data, 0000010504 bytes (0x00002908)
10:32:49.662835 http.c:691              <= Recv data: omitted
10:32:49.674838 http.c:703              == Info: Connection #0 to host my_tenant.visualstudio.com left intact
10:32:54.892530 http.c:703              == Info: Found bundle for host: 0x1f039e7e7b0 [serially]
10:32:54.892530 http.c:703              == Info: Can not multiplex, even if we wanted to
10:32:54.892530 http.c:703              == Info: Re-using existing connection #0 with host my_tenant.visualstudio.com
10:32:54.892530 http.c:703              == Info: Connected to my_tenant.visualstudio.com (13.107.42.18) port 443 (#0)
10:32:54.892530 http.c:650              => Send header, 0000000248 bytes (0x000000f8)
10:32:54.892530 http.c:662              => Send header: GET /My%20Project/_git/my_repo/info/refs?service=git-receive-pack HTTP/1.1
10:32:54.892530 http.c:662              => Send header: Host: my_tenant.visualstudio.com
10:32:54.893493 http.c:662              => Send header: User-Agent: git/2.38.1.windows.1
10:32:54.893493 http.c:662              => Send header: Accept: */*
10:32:54.893493 http.c:662              => Send header: Accept-Encoding: deflate, gzip, br, zstd
10:32:54.893493 http.c:662              => Send header: Pragma: no-cache
10:32:54.893493 http.c:662              => Send header:
10:32:54.937776 http.c:703              == Info: schannel: failed to decrypt data, need more data
10:32:54.937776 http.c:703              == Info: Mark bundle as not supporting multiuse
10:32:54.937776 http.c:650              <= Recv header, 0000000027 bytes (0x0000001b)
10:32:54.937776 http.c:662              <= Recv header: HTTP/1.1 401 Unauthorized
10:32:54.937776 http.c:650              <= Recv header, 0000000024 bytes (0x00000018)
10:32:54.937776 http.c:662              <= Recv header: Cache-Control: private
10:32:54.937776 http.c:650              <= Recv header, 0000000023 bytes (0x00000017)
10:32:54.937776 http.c:662              <= Recv header: Content-Length: 89642
10:32:54.937776 http.c:650              <= Recv header, 0000000025 bytes (0x00000019)
10:32:54.937776 http.c:662              <= Recv header: Content-Type: text/html
10:32:54.938884 http.c:650              <= Recv header, 0000000124 bytes (0x0000007c)
10:32:54.938884 http.c:662              <= Recv header: P3P: CP="CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR LOC CNT"
10:32:54.938884 http.c:650              <= Recv header, 0000000115 bytes (0x00000073)
10:32:54.938884 http.c:662              <= Recv header: WWW-Authenticate: Bearer authorization_uri=https://login.microsoftonline.com/64fc4b7c-0532-4da1-837a-3998119205c2
10:32:54.938884 http.c:650              <= Recv header, 0000000067 bytes (0x00000043)
10:32:54.938884 http.c:662              <= Recv header: WWW-Authenticate: Basic realm="https://tfs.app.visualstudio.com/"
10:32:54.938884 http.c:650              <= Recv header, 0000000033 bytes (0x00000021)
10:32:54.938884 http.c:662              <= Recv header: WWW-Authenticate: TFS-Federated
10:32:54.938884 http.c:650              <= Recv header, 0000000055 bytes (0x00000037)
10:32:54.938884 http.c:662              <= Recv header: X-TFS-ProcessId: b3d91dd2-832d-4de8-b4ea-ab96e94b35c0
10:32:54.938884 http.c:650              <= Recv header, 0000000064 bytes (0x00000040)
10:32:54.938884 http.c:662              <= Recv header: Strict-Transport-Security: max-age=31536000; includeSubDomains
10:32:54.938884 http.c:650              <= Recv header, 0000000050 bytes (0x00000032)
10:32:54.939774 http.c:662              <= Recv header: ActivityId: 9f05a07c-16d3-454e-b792-e2024f99998d
10:32:54.939774 http.c:650              <= Recv header, 0000000053 bytes (0x00000035)
10:32:54.939774 http.c:662              <= Recv header: X-TFS-Session: 9f05a07c-16d3-454e-b792-e2024f99998d
10:32:54.939774 http.c:650              <= Recv header, 0000000051 bytes (0x00000033)
10:32:54.939774 http.c:662              <= Recv header: X-VSS-E2EID: 9f05a07c-16d3-454e-b792-e2024f99998d
10:32:54.939774 http.c:650              <= Recv header, 0000000064 bytes (0x00000040)
10:32:54.939774 http.c:662              <= Recv header: X-VSS-SenderDeploymentId: 52b4b0e6-4e32-471a-b490-dba776dd4096
10:32:54.939774 http.c:650              <= Recv header, 0000000029 bytes (0x0000001d)
10:32:54.939774 http.c:662              <= Recv header: X-FRAME-OPTIONS: SAMEORIGIN
10:32:54.939774 http.c:650              <= Recv header, 0000000055 bytes (0x00000037)
10:32:54.939774 http.c:662              <= Recv header: X-TFS-FedAuthRealm: https://tfs.app.visualstudio.com/
10:32:54.939774 http.c:650              <= Recv header, 0000000065 bytes (0x00000041)
10:32:54.939774 http.c:662              <= Recv header: X-TFS-FedAuthIssuer: https://my_tenant.visualstudio.com/
10:32:54.939774 http.c:650              <= Recv header, 0000000079 bytes (0x0000004f)
10:32:54.939774 http.c:662              <= Recv header: X-VSS-AuthorizationEndpoint: https://my_tenant.vssps.visualstudio.com/
10:32:54.939774 http.c:650              <= Recv header, 0000000060 bytes (0x0000003c)
10:32:54.939774 http.c:662              <= Recv header: X-VSS-ResourceTenant: 64fc4b7c-0532-4da1-837a-3998119205c2
10:32:54.940777 http.c:650              <= Recv header, 0000000710 bytes (0x000002c6)
10:32:54.940777 http.c:662              <= Recv header: X-TFS-SoapException: %3C%3Fxml%20version%3D%221.0%22%20encoding%3D%22utf-8%22%3F%3E%3Csoap%3AEnvelope%20xmlns%3Asoap%3D%22http%3A%2F%2Fwww.w3.org%2F2003%2F05%2Fsoap-envelope%22%3E%3Csoap%3ABody%3E%3Csoap%3AFault%3E%3Csoap%3ACode%3E%3Csoap%3AValue%3Esoap%3AReceiver%3C%2Fsoap%3AValue%3E%3Csoap%3ASubcode%3E%3Csoap%3AValue%3EUnauthorizedRequestException%3C%2Fsoap%3AValue%3E%3C%2Fsoap%3ASubcode%3E%3C%2Fsoap%3ACode%3E%3Csoap%3AReason%3E%3Csoap%3AText%20xml%3Alang%3D%22en%22%3ETF400813%3A%20The%20user%20%27aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa%27%20is%20not%20authorized%20to%20access%20this%20resource.%3C%2Fsoap%3AText%3E%3C%2Fsoap%3AReason%3E%3C%2Fsoap%3AFault%3E%3C%2Fsoap%3ABody%3E%3C%2Fsoap%3AEnvelope%3E
10:32:54.940777 http.c:650              <= Recv header, 0000000148 bytes (0x00000094)
10:32:54.940777 http.c:662              <= Recv header: X-TFS-ServiceError: TF400813%3A%20The%20user%20%27aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa%27%20is%20not%20authorized%20to%20access%20this%20resource.
10:32:54.940777 http.c:650              <= Recv header, 0000000079 bytes (0x0000004f)
10:32:54.940777 http.c:662              <= Recv header: X-VSS-S2STargetService: 00000002-0000-8888-8000-000000000000/visualstudio.com
10:32:54.940777 http.c:650              <= Recv header, 0000000594 bytes (0x00000252)
10:32:54.941242 http.c:662              <= Recv header: X-TFS-FedAuthRedirect: https://spsprodeus24.vssps.visualstudio.com/_signin?realm=my_tenant.visualstudio.com&reply_to=https%3A%2F%2Fmy_tenant.visualstudio.com%2FAppDev%2520Team%2F_git%2Fmy_repo%2Finfo%2Frefs%3Fservice%3Dgit-receive-pack&redirect=1&hid=c9f4c823-47c5-44a2-9d6a-3cfd00458752&context=eyJodCI6MiwiaGlkIjoiMjFiZDUwNjUtMGI4Mi00Mzk4LTlhMjctMGExMjIwNjAzMzAxIiwicXMiOnt9LCJyciI6IiIsInZoIjoiIiwiY3YiOiIiLCJjcyI6IiJ90#ctx=eyJTaWduSW5Db29raWVEb21haW5zIjpbImh0dHBzOi8vbG9naW4ubWljcm9zb2Z0b25saW5lLmNvbSIsImh0dHBzOi8vbG9naW4ubWljcm9zb2Z0b25saW5lLmNvbSJdfQ2
10:32:54.941242 http.c:650              <= Recv header, 0000000068 bytes (0x00000044)
10:32:54.941242 http.c:662              <= Recv header: Request-Context: appId=cid-v1:14a064fe-0736-4753-ac67-ec119a6d0dfb
10:32:54.941242 http.c:650              <= Recv header, 0000000048 bytes (0x00000030)
10:32:54.941242 http.c:662              <= Recv header: Access-Control-Expose-Headers: Request-Context
10:32:54.941242 http.c:650              <= Recv header, 0000000033 bytes (0x00000021)
10:32:54.941782 http.c:662              <= Recv header: X-Content-Type-Options: nosniff
10:32:54.941782 http.c:650              <= Recv header, 0000000025 bytes (0x00000019)
10:32:54.941782 http.c:662              <= Recv header: X-Cache: CONFIG_NOCACHE
10:32:54.941782 http.c:650              <= Recv header, 0000000102 bytes (0x00000066)
10:32:54.941782 http.c:662              <= Recv header: X-MSEdge-Ref: Ref A: 75FF972D99C447809FA24C2FF4322CB5 Ref B: CHGEDGE1917 Ref C: 2022-12-07T15:32:54Z
10:32:54.941782 http.c:650              <= Recv header, 0000000037 bytes (0x00000025)
10:32:54.941782 http.c:662              <= Recv header: Date: Wed, 07 Dec 2022 15:32:53 GMT
10:32:54.941782 http.c:650              <= Recv header, 0000000002 bytes (0x00000002)
10:32:54.941782 http.c:662              <= Recv header:
10:32:54.941782 http.c:703              == Info: Ignoring the response-body
10:32:54.941782 http.c:676              <= Recv data, 0000001266 bytes (0x000004f2)
10:32:54.941782 http.c:691              <= Recv data: omitted   
10:32:54.943779 http.c:676              <= Recv data, 0000012336 bytes (0x00003030)
10:32:54.943779 http.c:691              <= Recv data: omitted
10:32:54.955776 http.c:676              <= Recv data, 0000016384 bytes (0x00004000)
10:32:54.955776 http.c:691              <= Recv data: omitted
10:32:54.976420 http.c:676              <= Recv data, 0000016384 bytes (0x00004000)
10:32:54.976420 http.c:691              <= Recv data: omitted
10:32:54.996420 http.c:676              <= Recv data, 0000016384 bytes (0x00004000)
10:32:54.996420 http.c:691              <= Recv data: omitted
10:32:55.015623 http.c:676              <= Recv data, 0000016384 bytes (0x00004000)
10:32:55.015623 http.c:691              <= Recv data: omitted
10:32:55.036421 http.c:676              <= Recv data, 0000010504 bytes (0x00002908)
10:32:55.036421 http.c:691              <= Recv data: omitted
10:32:55.050421 http.c:703              == Info: Connection #0 to host my_tenant.visualstudio.com left intact
10:32:55.050421 http.c:703              == Info: Issue another request to this URL: 'https://my_tenant.visualstudio.com/My%20Project/_git/my_repo/info/refs?service=git-receive-pack'
10:32:55.050421 http.c:703              == Info: Found bundle for host: 0x1f039e7e7b0 [serially]
10:32:55.050421 http.c:703              == Info: Can not multiplex, even if we wanted to
10:32:55.050421 http.c:703              == Info: Re-using existing connection #0 with host my_tenant.visualstudio.com
10:32:55.050421 http.c:703              == Info: Connected to my_tenant.visualstudio.com (13.107.42.18) port 443 (#0)
10:32:55.051422 http.c:703              == Info: Server auth using Basic with user 'mlambert@my_domain.com'
10:32:55.051422 http.c:650              => Send header, 0000000379 bytes (0x0000017b)
10:32:55.051422 http.c:662              => Send header: GET /My%20Project/_git/my_repo/info/refs?service=git-receive-pack HTTP/1.1
10:32:55.051422 http.c:662              => Send header: Host: my_tenant.visualstudio.com
10:32:55.051422 http.c:662              => Send header: Authorization: Basic <redacted>
10:32:55.051422 http.c:662              => Send header: User-Agent: git/2.38.1.windows.1
10:32:55.051422 http.c:662              => Send header: Accept: */*
10:32:55.051422 http.c:662              => Send header: Accept-Encoding: deflate, gzip, br, zstd
10:32:55.052425 http.c:662              => Send header: Pragma: no-cache
10:32:55.052425 http.c:662              => Send header:
10:32:55.130580 http.c:703              == Info: schannel: failed to decrypt data, need more data
10:32:55.131582 http.c:703              == Info: Mark bundle as not supporting multiuse
10:32:55.131582 http.c:650              <= Recv header, 0000000017 bytes (0x00000011)
10:32:55.131582 http.c:662              <= Recv header: HTTP/1.1 200 OK
10:32:55.131582 http.c:650              <= Recv header, 0000000024 bytes (0x00000018)
10:32:55.131582 http.c:662              <= Recv header: Cache-Control: private
10:32:55.131582 http.c:650              <= Recv header, 0000000023 bytes (0x00000017)
10:32:55.131582 http.c:662              <= Recv header: Content-Length: 29569
10:32:55.131582 http.c:650              <= Recv header, 0000000060 bytes (0x0000003c)
10:32:55.131582 http.c:662              <= Recv header: Content-Type: application/x-git-receive-pack-advertisement
10:32:55.131582 http.c:650              <= Recv header, 0000000124 bytes (0x0000007c)
10:32:55.131582 http.c:662              <= Recv header: P3P: CP="CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR LOC CNT"
10:32:55.132584 http.c:650              <= Recv header, 0000000055 bytes (0x00000037)
10:32:55.132584 http.c:662              <= Recv header: X-TFS-ProcessId: 80fabaad-c68c-432c-9465-09697621a7c7
10:32:55.132584 http.c:650              <= Recv header, 0000000064 bytes (0x00000040)
10:32:55.132584 http.c:662              <= Recv header: Strict-Transport-Security: max-age=31536000; includeSubDomains
10:32:55.132584 http.c:650              <= Recv header, 0000000050 bytes (0x00000032)
10:32:55.132584 http.c:662              <= Recv header: ActivityId: 40195887-c164-4902-b830-58e582d57642
10:32:55.132584 http.c:650              <= Recv header, 0000000053 bytes (0x00000035)
10:32:55.132584 http.c:662              <= Recv header: X-TFS-Session: 40195887-c164-4902-b830-58e582d57642
10:32:55.132584 http.c:650              <= Recv header, 0000000051 bytes (0x00000033)
10:32:55.132584 http.c:662              <= Recv header: X-VSS-E2EID: 40195887-c164-4902-b830-58e582d57642
10:32:55.132584 http.c:650              <= Recv header, 0000000064 bytes (0x00000040)
10:32:55.132584 http.c:662              <= Recv header: X-VSS-SenderDeploymentId: 52b4b0e6-4e32-471a-b490-dba776dd4096
10:32:55.132584 http.c:650              <= Recv header, 0000000081 bytes (0x00000051)
10:32:55.133579 http.c:662              <= Recv header: X-VSS-UserData: 245e7561-35a1-69a8-9278-007e08cf7c51:mlambert@my_domain.com
10:32:55.133579 http.c:650              <= Recv header, 0000000029 bytes (0x0000001d)
10:32:55.133579 http.c:662              <= Recv header: X-FRAME-OPTIONS: SAMEORIGIN
10:32:55.133579 http.c:650              <= Recv header, 0000000068 bytes (0x00000044)
10:32:55.133579 http.c:662              <= Recv header: Request-Context: appId=cid-v1:14a064fe-0736-4753-ac67-ec119a6d0dfb
10:32:55.133579 http.c:650              <= Recv header, 0000000048 bytes (0x00000030)
10:32:55.133579 http.c:662              <= Recv header: Access-Control-Expose-Headers: Request-Context
10:32:55.133579 http.c:650              <= Recv header, 0000000033 bytes (0x00000021)
10:32:55.133579 http.c:662              <= Recv header: X-Content-Type-Options: nosniff
10:32:55.133579 http.c:650              <= Recv header, 0000000025 bytes (0x00000019)
10:32:55.133579 http.c:662              <= Recv header: X-Cache: CONFIG_NOCACHE
10:32:55.133579 http.c:650              <= Recv header, 0000000102 bytes (0x00000066)
10:32:55.133579 http.c:662              <= Recv header: X-MSEdge-Ref: Ref A: 49A56ADB5126447FAAFE86719DE03706 Ref B: CHGEDGE1917 Ref C: 2022-12-07T15:32:55Z
10:32:55.134581 http.c:650              <= Recv header, 0000000037 bytes (0x00000025)
10:32:55.134581 http.c:662              <= Recv header: Date: Wed, 07 Dec 2022 15:32:54 GMT
10:32:55.134581 http.c:650              <= Recv header, 0000000002 bytes (0x00000002)
10:32:55.134581 http.c:662              <= Recv header:
10:32:55.134581 http.c:676              <= Recv data, 0000003443 bytes (0x00000d73)
10:32:55.134581 http.c:691              <= Recv data: omitted
10:32:55.138579 http.c:703              == Info: schannel: failed to decrypt data, need more data
10:32:55.138579 http.c:676              <= Recv data, 0000012058 bytes (0x00002f1a)
10:32:55.139579 http.c:691              <= Recv data: omitted
10:32:55.172117 http.c:703              == Info: Connection #0 to host my_tenant.visualstudio.com left intact
Everything up-to-date

[dscho]

The installer preferences are stored in Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Git_is1