|
Posted by =?Utf-8?B?c2ltcGxlX3VzZXI=?= on July 18, 2007, 5:16 pm
If you were Registered and logged in, you could reply and use other advanced thread options
"S. Pidgorny <MVP>" wrote:
> I think automatic logon is designed to require the DefaultPassword value.
> Therefore LSA private data won't help, as there is no setting that allow
> system to use it for automatic logon (AFAIK).
>
> What are you trying to achieve with this?
>
> --
> Svyatoslav Pidgorny, MS MVP - Security, MCSE
> -= F1 is the key =-
>
> * http://sl.mvps.org * http://msmvps.com/blogs/sp *
>
> > Hi there,
> > I was trying to change the way of automatic logon.
> > I wrote simple executable using LSA to set password by LsaStorePrivateData
> > (). Then I deleted reg.key value 'DefaultPassword'
> > I restarted PC (WindowsXP installed) but it didn't get through - it show
> > log-on dialog and I have to enter password manually.
> > I thought that Winlogon should be able to retrieve 'secret' password and
> > not
> > to look for 'DefaultPassword' value.
> > Do I missing something here? Any additional steps needs?
> >
> > Regards,
> >
>
>
> Hi,
Idea is to protect automatic logon password. There is the article
(http://msdn2.microsoft.com/en-us/library/aa378826.aspx), which talks about
it. What I was trying to achieve is to remove plain text (DefaultPassword)
from the registry that it can’t be seen.
But at this point I’m not sure what exactly my steps should be in order to
do that ( trying to find more articles, so far not so good).
I might be wrong but it could be that I have to write custom dll in order to
perform auto logon. Any ideas or pointing to some direction are welcome
|