Re: How Netlogon Service creates the Winlogon\Domain Cache

First of all, Gina creates and manages that registry key, not Netlogon as you thought.
The API it uses to do that is ::DsEnumerateDomainTrusts()


Muhammad Ali khan wrote:
1. I am talking about the registry key path as under
"HKLM\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\Winlogon\Domain

Cache" .

2.When i get log on to workstation as a domain user this key has

formed.

3.If i can delete this key from registry and then press Alt+Clt+Del

and select "Change Password button" then Change Password Dialog

appears and its "Log on to" field contain the name of my workstation

and the domain both and then i cancel the dialog without changing my

password.
4.But one important thing is that after doing the Point No#3 ,the

above deleted Key from registry has again formed in the registry

with correct domain name even "my workstation can contact the domain

controller on the network" OR "my workstation has unplug from the

network."
5. I think that all above has handled by LOCAL NETLOGON SERVICE

running on my workstation.

What i need from you?
6.I need the name of Windows API function which Netlogon service use to find the name of domain controller to form the above key.

.

Relevant Pages

  • Re: For the AdaOS folks
    ... > could be on any workstation in the network. ... >>root file system, which obviously is only local to one node. ... - Joining (hard pressed to think of any registry entry I wanted ...
    (comp.lang.ada)
  • Re: [Full-Disclosure] PLEASE QUIT YACKING ABOUT M$
    ... on in order to get the 5% exploits within a single post, or all posts. ... >> simply another API. ... >> registry editor, in fact, the classes I put together treat them both very ... > from the filesysem, in Windows, you need to learn the filesystem API ...
    (Full-Disclosure)
  • Re: Registry deletions
    ... I need to create a automated process that will delete Registry entries ... the old Novell environment exist in workstation registries. ... Besides using a .reg file to add or modify the registry, ...
    (microsoft.public.windowsxp.general)
  • RE: [Full-Disclosure] M$ - so what should they do?
    ... > simply another API. ... > registry editor, in fact, the classes I put together treat them both very ... And before you say you *can* configure apps by directly editing the ...
    (Full-Disclosure)
  • Re: Security on students workstations?
    ... environment, and here in our office environment, is setup 1 workstation how ... I then change the Registry perms to give ... allow students to still be able to get work done.. ...
    (microsoft.public.win2000.security)