How NEtLogon service creates Winlogon\Domain cache

G

Guest

1. I am talking about the registry key path as under
"HKLM\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\Winlogon\Domain

Cache" .

2.When i get log on to workstation as a domain user this key has

formed.

3.If i can delete this key from registry and then press Alt+Clt+Del

and select "Change Password button" then Change Password Dialog

appears and its "Log on to" field contain the name of my workstation

and the domain both and then i cancel the dialog without changing my

password.
4.But one important thing is that after doing the Point No#3 ,the

above deleted Key from registry has again formed in the registry

with correct domain name even my workstation can contact the domain

controller on the network OR my workstation has unplug from the

network.
5. I think that all above has handled by LOCAL NETLOGON SERVICE

running on my workstation.

What i need from you?
6.I need the name of Windows API function which Netlogon service
use to find the name of domain controller to form the above key.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top