HELP - A problem about GINA

From: Alex Shi (Shi_at_discussions.microsoft.com)
Date: 10/26/04 

Date: Tue, 26 Oct 2004 01:53:02 -0700

We develop a new gina which authenticate the user with USB card. We logon the
user with the function LogonUser(...) SDK API. Everything works well, except
that:
If the user's privilege is USER(no matter Domain or Local), when the user
logon, the explorer and IE prompt some ActiveX control is not security and
cannot be loaded.
If the user's privilege is Administrator, evrything works well.
If there isn't extra extension control installed, evrything works well.
The original gina of MS works well always.
If the User logons successfully one time(using MSGina or promote its
privilege to Administratior), the user can logon the system well in the
following.(with our gina and set its privilege to USER).

The logon type of LogonUser(...) is LOGON32_LOGON_INTERACTIVE.

Relevant Pages

  • RE: HELP - A problem about GINA
    ... LogonUser in your GINA when you should use LSALogonUser? ... > If the user's privilege is Administrator, ... > If there isn't extra extension control installed, evrything works well. ... the user can logon the system well in the ...
    (microsoft.public.platformsdk.security)
  • Re: Replacement GINA using smart cards fail to display user Taskbar and user Icons.
    ... The key GINA callbacks are ... > mean that msgina's wlxloggedoutsas function is displaying the msgina logon ...
    (microsoft.public.platformsdk.security)
  • Re: msgina
    ... >>> is there a way to make msgina start my exe if login was successful? ... you can look into using C++ to create your own gina ... in addition to standard logon i wwant PC-s to report to my ... you manage to get the flag updated. ...
    (microsoft.public.vb.general.discussion)
  • Re: Unique Windows XP Authentication
    ... Is it possible to do the same thing in Vista & if it is, ... GINA is deprecated; it's no longer used in Windows Vista or Windows Server ... This means that before the logon ...
    (microsoft.public.windowsxp.security_admin)
  • Re: networking functionality
    ... So,Is it that socket functions and wininet functions are not guaranteed to ... work in GINA? ... Won't the network stack be up? ... I hook on to the Logon dialog box similar to ...
    (microsoft.public.win32.programmer.networks)