Re: Verify NT password

From: Randy Birch (rgb_removethis_at_mvps.org)
Date: 03/17/04


Date: Tue, 16 Mar 2004 19:19:28 -0500

This should *never* need to be done outside the normal Windows
authentication process. I do show a way to do this on my site, but I suggest
you instead use http://vbnet.mvps.org/code/network/lookupaccountname.htm
which does not require the user to enter their password but rather requests
they enter the username used to log on to the domain. If the username
entered is correct (the SID for the user and the current SID are the same),
the username entered was used to log on to the system.

Read http://vbnet.mvps.org/code/network/acceptsecuritycontext.htm to see the
reasons for not asking for the user's pw.

-- 
Randy Birch
MVP Visual Basic
http://vbnet.mvps.org/
Please respond only to the newsgroups so all can benefit.
"Jon Forrester" <jon.forrester@nuinternational.com> wrote in message 
news:54A2B4A9-13D7-4CED-93DE-D897E5CD29A9@microsoft.com...
: Could anyone advise if it is possible to re-verify a users NT password 
from a VB6 application?
:
: I just want the user to type the password into a form and then verify if 
this matches the NT password, i.e. just return a boolean to me (I don't 
want/need to see the value of the password).
: 


Relevant Pages

  • Re: ASP.NET User.Identity.Name value after a domain username chang
    ... Can you point me to any resources I can use about getting the SID of the ... WebRequest user without using the username as the base of a lookup (since I ... access a website on the server. ... I have a very confusing issue when the domain login of a user is changed ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: sessions numbers
    ... > select username, countfrom v$session group by username; ... Your count, from v$session, provides the number of sessions each ... SQL> select username, sid, count ...
    (comp.databases.oracle.server)
  • Re: Randomly-generated challenge method ?
    ... >> I thought about a secure method of authentication based on a simple ... >> This method uses hazard to increase the authentication process ... The computation duration can be easily set by ... The user sends his USERNAME, ...
    (sci.crypt)
  • Re: Finding out particular admin username!
    ... in the second command you add 500 (admin account ... always ends in 500) to find out true name of admin account. ... Length of SID in memory is 28 bytes ... account username) ...
    (microsoft.public.security)
  • Timestamp SQL question
    ... Assuming I have only one connection as SYS: ... select username, sid, serial#, logon_time, to_timestamp ... How can I compare timestamps in a where clause? ...
    (comp.databases.oracle.server)