Re: Password Filter implementation

From: William DePalo [MVP VC++] (willd.no.spam_at_mvps.org)
Date: 09/06/05

  • Next message: Joe Richards [MVP]: "Re: Password Filter implementation" 
    Date: Mon, 5 Sep 2005 20:24:08 -0400

    "Amdi Nielsen" <ani04@scan-soft.d_remove_k> wrote in message
    news:%23DEdK9lsFHA.760@TK2MSFTNGP14.phx.gbl...
    > I want to create my own password filter, and I have tried to implement it
    > in a DLL as specified by Microsoft.
    > When I try to install the PassWord filter by:
    > 1. Enabling Local Security "Password must meet complexity requirements".
    > 2. Copy DLL "MyFilter.dll" to c:\Windows\System32
    > 3. Adding name of filter "MyFilter" to "Notification Packages" in
    > Registry.
    > 4. Reboot computer
    > the filter is not working - it dosn't seem to be installed at all.

    At the command prompt type

        dumpbin /exports YourPasswordFilterName.dll

    Take a look at the names of the functions which are exported. You need to
    have these (undecorated) names

            InitializeChangeNotify
            PasswordChangeNotify
            PasswordFilter

    The functions' signatures and calling conventions used must be exactly as
    described in the documentation.

    The first function must return a BOOL value of TRUE. If it does not the
    other two won't be called.

    Does your filter meet all of those requirements?

    > I have tried to create my own DLL from scratch, and I have tried several
    > samples from the internet, but I allways had to make some changes to the
    > code to make it compile. I also tried the old sample from MS.

    Did you try the one in the Platform SDK's directory

        Samples\security\PasswordFilters\PassFilt

    It has been two years or so, but as I recall the MS sample worked fine for
    me on XP.

    > Or if anybody have an idea what the showstopper is.

    Is there any change that your code raises an exception?

    And just by the way, the LSA uses its own special string format that is
    UNICODE encoded but neither the familiar BSTR nor null terminated type.

    Regards,
    Will

  • Next message: Joe Richards [MVP]: "Re: Password Filter implementation"

    Relevant Pages

    • Re: Password Filter implementation
      ... Do you have to have the SDK to implement passfilt.dll? ... > I want to create my own password filter, and I have tried to implement it ... > in a DLL as specified by Microsoft. ... > When I try to install the PassWord filter by: ...
      (microsoft.public.platformsdk.security)
    • Re: Define Complex Passwords
      ... if you want to create your own password filter you have to write it in c/c++ and then install it and tell AD to use it. ... Joe Richards Microsoft MVP Windows Server Directory Services ...
      (microsoft.public.windows.server.active_directory)
    • Re: Custom password filter
      ... You can use the password filter to filter domain or local account ... which will tell you how to install and write. ... >Subject: Custom password filter ...
      (Security-Basics)
    • Re: Password Strength in Active Directory
      ... You need to create a custom password filter. ... refer to the Microsoft Platform Software ... Platform SDK. ... The SDK can be downloaded by installing the "Core SDK" from ...
      (microsoft.public.win2000.security)
    • Re: Password policy
      ... If you're familiar with C you can write a password filter to do this. ... Microsoft even gives you a sample to get started. ... Enforcer product will do exactly what you want without any programming. ...
      (microsoft.public.win2000.security)