?
Solved

Get System Usernames/Passwords

Posted on 1998-02-25
6
Medium Priority
?
168 Views
Last Modified: 2010-04-06
I have heard that there is no direct system call to retrieve  valid usernames and passwords in WindowsNT. Is this true and if so, is there a way to check a submitted username/password via system calls (eg WinAPI) against, say, the registry, to validate the submission?
0
Comment
Question by:bobness
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 5

Expert Comment

by:ronit051397
ID: 1359804
0
 

Author Comment

by:bobness
ID: 1359805
Ronit -

   Thanks for the tip. Unfortunately, I'm searching for a generic login type interface that will confirm *any* user's username and password as valid on the NT box (ie, similar to WinNT startup login) and possibly retrieve associated permissions as well. The routine you pointed me towards was for current user info only, although I think it could be useful.

                                         - Bobness

0
 
LVL 3

Accepted Solution

by:
altena earned 300 total points
ID: 1359806
Sorry bob,

There is NO WAY you can do this. If it were possible it would
really really screw up the security system.

(just one example: an activeX component could easily take out
all usernames/passwords and mail them to its creator)

Check out the last few MSJ-journals. The issue is discussed
in detail. The other source you should look into is the
Microsoft Developer Network: www.microsoft.com/msdn

Sorry for the bad news, please do not blame the messenger....
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:bobness
ID: 1359807
altena -

   I understand the prohibition against pulling out usernames and passwords for security reasons. Perhaps there is a way though that one could simulate the login process by running a submitted password through the one-way encryption to compare with the stored hash table encrypted password? That would be sufficient...

                                          - bobness
0
 
LVL 3

Expert Comment

by:altena
ID: 1359808
Now there is a tricky question...

I can see that an appplication might need to log in to some distant NT-server , without a user present.

In the scenario where I have neededto do this (FTP) the answer is very simple. I do not know how to do that on NT.
0
 

Author Comment

by:bobness
ID: 1359809
Thanks anyway -
I'm currently looking further into WinAPI call NetUserGetInfo deeper - I think it might contain the secrets I seek...
0

Featured Post

[Webinar] Lessons on Recovering from Petya

Skyport is working hard to help customers recover from recent attacks, like the Petya worm. This work has brought to light some important lessons. New malware attacks like this can take down your entire environment. Learn from others mistakes on how to prevent Petya like worms.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The uses clause is one of those things that just tends to grow and grow. Most of the time this is in the main form, as it's from this form that all others are called. If you have a big application (including many forms), the uses clause in the in…
Introduction I have seen many questions in this Delphi topic area where queries in threads are needed or suggested. I know bumped into a similar need. This article will address some of the concepts when dealing with a multithreaded delphi database…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
This tutorial will teach you the special effect of super speed similar to the fictional character Wally West aka "The Flash" After Shake : http://www.videocopilot.net/presets/after_shake/ All lightning effects with instructions : http://www.mediaf…
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question