Programmatic verification of password
From: Dave Williams (davewilliams29_at_yahoo.com)
Date: 07/06/05
- Next message: Eugene Taylor: "Re: Spyware or virus?"
- Previous message: Roger Abell: "Re: Logon/Logoff Failure Audit - Event 537 in Windows Server 2003"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 6 Jul 2005 11:29:47 +0100
Hi all, this is a coding question, but I couldn't find a suitable developer
group so I guess they're all here - if there's somewhere better I can post,
please tell me.
I have a service that's running as a user that's a member of domain admins
group, which needs to veryify an account password - actually the password of
the account currently running the service, to see if someone has changed it
since the service started.
I've had a go at using LogonUser but it refuses as it says it requires a
right I don't have. I'm suspecting this is the 'act as a part of the
operating system' right, which indeed my user doesn't have. When I grant it
that right, it's then able to use LogonUser to tell if the stored password
is still correct.
However, since I don't want to log on as the user, only verify the password,
having the 'act as a part of the operating system' right seems quite
heavyweight. Is there any other way I can achieve my goal?
Thanks for any suggestions,
Dave
- Next message: Eugene Taylor: "Re: Spyware or virus?"
- Previous message: Roger Abell: "Re: Logon/Logoff Failure Audit - Event 537 in Windows Server 2003"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|