RE: User Password History

From: Denis Galiana (denis.galiana_at_nospam.nospam)
Date: 01/27/05

  • Next message: dr_hook: "Problems with RSACryptoServiceProvider in a Windows Service" 
    Date: Thu, 27 Jan 2005 02:59:01 -0800

    Hi Rhett,

    What I want to do exactly is encrypt a secret data in the user session
    (stored in a AD attribute, for instance), so only him can decrypt it.

    Todays, I have a solution : I derive a key from the user password; I get the
    user password (and its changes, if done by the user, ie, not forced by the
    admin) according to a GINA stub that provides me the user password (and the
    old one, when it has changed).

    This has some drawbacks : when the user changes his password on a PC that do
    not have the stub or if the admin forces the user password, the user cannot
    decipher the secret data.

    So, I've found that DPAPI solved my problems, but it stores data in the user
    profile, requiring roaming profile for mobile users.
    If I could find a way to do the same without anything in the user profile
    and without a GINA stub, I would be very pleased.

    Best Regards,
    Denis Galiana

  • Next message: dr_hook: "Problems with RSACryptoServiceProvider in a Windows Service"

    Relevant Pages

    • Re: Roaming Profile Error
      ... The first time when you tried logon, the new user password may not be ... This posting is provided "AS IS" with no warranties, and confers no rights. ... >the roaming profile tab for each user, ...
      (microsoft.public.win2000.general)
    • Re: changing user logon name - some questions
      ... will log in next day after the changes) and user will log into his old profile? ... I thing another method is to change user password too and log as this user ... Resetting a users password is never a good idea, since you'll break his local credential cache and access to his EFS-Encrypted Files. ...
      (microsoft.public.windows.server.active_directory)
    • Re: Logon to profile
      ... credentials into another users profile. ... If not is there a way to configure profile specific information with out knowing the user password? ...
      (microsoft.public.windowsxp.general)