When a user visits a link to a website or network share, they are prompted for credentials. The user inputs the credentials and lets the Save Password box stay checked (default is to Save in WM2003 and 5.0) then finishes their business. The next user shows up and logs onto the device, when they click on a link they are not prompted for credentials. The computer uses the previously stored username/password to authenticate to the destination and the users gets in without a hassle.
These credentials persist through a wamboot on the all devices and through coldboots on WM 5.0 devices (thanks to that persistent memory).

The only time the user will be prompted for credentials is if they visit a link that the cached credentials cannot access, so over time you would end up using the user credentials that had the most access.It would seem to be a good candidate for Symscript, but does anyone know where these cache credentials are stored?