Re: Programmatic verification of password

"Dave Williams" <davewilliams29@xxxxxxxxx> wrote in message
news:O2rE4FwgFHA.3312@xxxxxxxxxxxxxxxxxxxxxxx
> I've had a go at using LogonUser but it refuses as it says it requires a
> right I don't have. I'm suspecting this is the 'act as a part of the
> operating system' right, which indeed my user doesn't have. When I grant
> it
> that right, it's then able to use LogonUser to tell if the stored password
> is still correct.
>
> However, since I don't want to log on as the user, only verify the
> password,
> having the 'act as a part of the operating system' right seems quite
> heavyweight. Is there any other way I can achieve my goal?

You may be able to use the Security Services Provider Interface (SSPI) which
is described here:

http://support.microsoft.com/?id=180548

I say may because, frankly, I have not tried it running as LocalSystem. If
it works for you, I'd be interested to know that. :-)

Regards,
Will


.

Relevant Pages

  • Programmatic verification of password
    ... which needs to veryify an account password - actually the password of ... I'm suspecting this is the 'act as a part of the ... operating system' right, which indeed my user doesn't have. ... it's then able to use LogonUser to tell if the stored password ...
    (microsoft.public.win2000.security)
  • Re: Programmatic verification of password
    ... LogonUser() with LOGON_NETWORK? ... which needs to veryify an account password - actually the password ... I'm suspecting this is the 'act as a part of the ... > operating system' right, which indeed my user doesn't have. ...
    (microsoft.public.win32.programmer.kernel)
  • Unable to assign SeTcbPrivilege (SE_TCB_NAME)!?!?
    ... it seems the process token making the call to LogonUser ... "Act as part of the operating system" aka SeTcbPrivilege aka SE_TCB_NAME... ... I see that my process token still does not have the desired privilege ...
    (microsoft.public.win2000.security)
  • Programmatic verification of password
    ... find a suitable developer group - if there's somewhere better I can post, ... I'm suspecting this is the 'act as a part of the ... operating system' right, which indeed my user doesn't have. ... it's then able to use LogonUser to tell if the stored password ...
    (microsoft.public.win32.programmer.kernel)
  • Unable to assign SeTcbPrivilege (SE_TCB_NAME)!?!?
    ... it seems the process token making the call to LogonUser ... "Act as part of the operating system" aka SeTcbPrivilege aka SE_TCB_NAME... ... I see that my process token still does not have the desired privilege ...
    (microsoft.public.security)