Re: How to Validate User Credentials on Windows 2000 OS?

Asif Bhimla wrote:

I have tried this link out, but it is not working. Actually the code seems to
be not working. Here is the code which i had use:

[...]

Can you please check this code out?

This code tries to enable the SE_TCB_NAME privilege, which is likely worthless since this privilege is normally not granted to any user account (and it should not be granted). On the other hand, in Windows 2000, LogonUser requires this privilege. The net result is that you cannot use LogonUser on Windows 2000 except from the code running as LocalSystem.

I am not sure which link you tried out, but the one I provided suggests using SSPI instead of LogonUser for Windows NT 4.0/2000. You probably read some other article.

Let me repeat:
http://support.microsoft.com/default.aspx?scid=kb;en-us;180548

Please read it carefully, it answers exactly your question: how to validate user credentials in Windows 2000.

-- Alex Fedotov

.

Relevant Pages

  • Re: WindowsIdentity.Impersonate() vs ImpersonateLoggedOnUser()
    ... So LogonUser, ImpersonateLoggedOnUser and RevertToSelf ... On Windows 2000 Professional the code fails at LogonUser with error ... Windows 2000 needs the "Act as part of the operating system" privilege ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Change process user for app in VB 6
    ... Windows 2000, and under 2000 LogOnUser requires 'Act as part of opperating ... system' privilege. ... > Dim blnResult As Boolean ...
    (microsoft.public.vb.winapi)
  • Re: Detecting Admin Privileges Via Code
    ... I didn't bother checking in my code to see if I had SE_TCB_NAME privilege, I just called LogonUser. ... As a result, when Windows 2003 came out, and didn't have that restriction, my code just plain worked exactly the same. ... Woodinville WA 98072-8661 | WFTPD, WFTPD Pro are Windows FTP servers. ...
    (microsoft.public.security)
  • Re: CreateProcessAsUser Doubt
    ... I have a problem with windows 2000. ... I need to execute this program to give SE_TCB_NAME privilege to execute ... LogonUser and become administrator user. ...
    (microsoft.public.platformsdk.security)
  • Re: Privilege-escalation attacks on NT-based Windows are unfixable
    ... >>against the Windows messaging exploit in question. ... The application, since it's the one with the privilege, ... > service component and its desktop component through Windows messages, ... regardless of the privilege levels of either process. ...
    (comp.security.misc)
Quantcast