Input box on work station when logged on to a domain.

Posted on 2004-11-23
Last Modified: 2010-05-02
I have been asked by a friend to create an application that will provide an input box to a user logging on to a domain server. The input box asks the user to enter a secret question and answer which is then saved to a file. In the event a user looses their password the helpdesk can use this information to validate the user and reset their password.

I thought this was simple enough but have run into a few problems. I created the application to run in the startup folder for all users, a file holds a list of users who have already answered the secret question so that they are not asked again. Problems are....

1. The application won't run on the server and asks to be installed locally, i assume this is because it requires dependancy files. I wanted to run the app on the server only.

2. If i try to get the users to install the app locally they do not have the admin rights to install it!

Can anyone point me in the right direction or maybe suggest other solutions that i could use? Any help would be much appreciated.


Question by:bassl1ne
    LVL 28

    Expert Comment

    If your app doesn't use any special components you should be able to put it on a network share and call it from a logon script.
    LVL 76

    Expert Comment

    If you are right about the dependency, then using the Package and Deployment Wizard should fix it.
    You will have to talk to your system administration to allow installation, or to do it themselves. They may have a remote facility to do it.
    LVL 76

    Accepted Solution

    The process you've described sounds dangerous to me.  Wherever the file with the secret questions and answers is stored is going to have to be available to all users.  That means if any of them can figure out where the file is stored, then they can gain access to everyone's question and answer, thereby allowing them to get anyone's password reset so they can access their account.  I'd recommend using a web based system.  That way the database can be hidden away so the users can't get access it.  A web solution would also eliminate the issue you've run into of having the app run from the server.  Of course this is only a practical solution if whomever you're doing this for has a web server.  Also, is the program run during each login?  Are the users required to change their question/answer that often?

    I agree with what vinnyd79 said about components.  It could be that the problem is an outgrowth of you have used an older or newer version of a component that is on the computers but the versions don't match up.  If you can ID the component, then you could either change the program so the components match, or have an admin push the required component(s) down to each PC.

    Author Comment

    The components listed in Package and Deployment wizard are:

    [Bootstrap Files]

    Is there a way to compile without requiring these files? Its not really an option for the system administrator to install the program on all machine as there are about 100 clients.

    Author Comment

    BlueDevilFan, i was thinking along the lines of using a web server based solution as this is available, but i still need to pass the user name as a parameter which would require another application right?
    LVL 76

    Expert Comment

    by:David Lee
    If you mean the username of the currently logged in user, then no, you don't need another app for that.  Depending on what the web server software is it can be configured to get the username.  

    Featured Post

    Why You Should Analyze Threat Actor TTPs

    After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

    Join & Write a Comment

    Introduction While answering a recent question ( in the VB classic zone, I wrote some VB code in the (Office) VBA environment, rather than fire up my older PC.  I didn't post completely correct code o…
    Since upgrading to Office 2013 or higher installing the Smart Indenter addin will fail. This article will explain how to install it so it will work regardless of the Office version installed.
    As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
    Get people started with the process of using Access VBA to control Outlook using automation, Microsoft Access can control other applications. An example is the ability to programmatically talk to Microsoft Outlook. Using automation, an Access applic…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now