Get System Usernames/Passwords

I have heard that there is no direct system call to retrieve  valid usernames and passwords in WindowsNT. Is this true and if so, is there a way to check a submitted username/password via system calls (eg WinAPI) against, say, the registry, to validate the submission?
bobnessAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

ronit051397Commented:
0
bobnessAuthor Commented:
Ronit -

   Thanks for the tip. Unfortunately, I'm searching for a generic login type interface that will confirm *any* user's username and password as valid on the NT box (ie, similar to WinNT startup login) and possibly retrieve associated permissions as well. The routine you pointed me towards was for current user info only, although I think it could be useful.

                                         - Bobness

0
altenaCommented:
Sorry bob,

There is NO WAY you can do this. If it were possible it would
really really screw up the security system.

(just one example: an activeX component could easily take out
all usernames/passwords and mail them to its creator)

Check out the last few MSJ-journals. The issue is discussed
in detail. The other source you should look into is the
Microsoft Developer Network: www.microsoft.com/msdn

Sorry for the bad news, please do not blame the messenger....
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Rowby Goren Makes an Impact on Screen and Online

Learn about longtime user Rowby Goren and his great contributions to the site. We explore his method for posing questions that are likely to yield a solution, and take a look at how his career transformed from a Hollywood writer to a website entrepreneur.

bobnessAuthor Commented:
altena -

   I understand the prohibition against pulling out usernames and passwords for security reasons. Perhaps there is a way though that one could simulate the login process by running a submitted password through the one-way encryption to compare with the stored hash table encrypted password? That would be sufficient...

                                          - bobness
0
altenaCommented:
Now there is a tricky question...

I can see that an appplication might need to log in to some distant NT-server , without a user present.

In the scenario where I have neededto do this (FTP) the answer is very simple. I do not know how to do that on NT.
0
bobnessAuthor Commented:
Thanks anyway -
I'm currently looking further into WinAPI call NetUserGetInfo deeper - I think it might contain the secrets I seek...
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Delphi

From novice to tech pro — start learning today.