Re: Prevent winlogon before a specific program starts from a service




Anders Jansson wrote:
> Hi!
>
> I would like to prevent users to login, .i.e pressing Ctrl-Alt-Delete and
> give their credentials, until a specific program has started (which is
> started by a service), or after the Service Control Manager database has been
> unlocked, don't know which is best?
>
> The scenario is, I have a service that starts programs that displays Windows
> on the system console, that should be visible to a logged on user. This
> service uses "WinSta0\Default" as the destop session for all these programs,

Are you aware that this won't work on Terminal Services or when Windows
XP fast user switching mechanism is used ?

> but if a user is logged on to quickly, some windows fails to be displayed
> correctly, and even some programs crashes. But if a user waits about 45
> seconds or so, all windows are displayed correctly and all programs are
> behaving correctly! This service is written to logon as a specific local
> account with specific rights (local Administrator by group membership) and
> then starts programs in a batch file as that user. The logged on user is a
> ordinary user, with no Administrators rights, and should be able to use the
> applications started.
> I would like a message dialog saying something like "System is starting,
> please wait.." when Ctrl-Alt-Delete is pressed, then later when all programs
> has started (or one specific) users are allowed to logon by pressing
> Ctrl-Alt-Delete.

IMHO, you're trying to cure the symptom instead of curing the disease.
What you should do is fixing your "launch from a service" system so
that it can launch your programs in every circumstances. What happens
now if the user log off and another user log on?

Wouldn't it far more simple to have in the "Startup" folder of
Everybody's Start Menu a "run as" batch or something similar that would
run the programs when a user log on, instead of relying on a service?

Arnaud
MVP - VC

.



Relevant Pages

  • Re: Downlevel machine, AD user, system and group policies
    ... policy be applied to AD user log on to Windows NT 4.0 ... workstation belonging to NT 4.0 domain? ... >policy however user configuration Group Policy settings ... >> If a user with an account on Windows 2000 domain logs ...
    (microsoft.public.win2000.group_policy)
  • Re: What I get if I connect XP Home to Domain?
    ... Can user log to Windows XP useing ... What about network disks will be mapped or not? ... Do I get anything to connect Windows XP Home to domain? ... supplying domain credentials if necessary. ...
    (microsoft.public.windowsxp.general)
  • Re: users activity
    ... For instance i want to know when a user log in the server,when was the ... Can this be done due to active directory or needs some other program? ... Audit User Access of Files, Folders, and Printers in Windows XP - ...
    (microsoft.public.windowsxp.general)
  • Re: users activity
    ... For instance i want to know when a user log in the server,when was the ... Can this be done due to active directory or needs some other program? ... Audit User Access of Files, Folders, and Printers in Windows XP - ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Does this make sense?
    ... scroll to the Windows NT section: ... the same affect as restarting the computer and pressing CTRL-ALT-DELETE." ...
    (microsoft.public.windowsxp.general)