How to change "Invalid Login Messages"

[Guest]

Hi,

Can anyone tell me how, if it is possilbe, to change the message displayed
to the user when he logs in incorrectly? For example, when a user enters
the wrong password he gets the message: "The Password is Incorrect. Type the
Pas..... ".
I want to change this message to only display something like "Invalid Logon
Attempt". So that the user, who might be a hacker trying to break into an
account, will not know if he got only the user-id wrong or the password wrong
or both.

Thanks for any help regarding this. I think its a security issue when the
operating system gives hints that the username is correct and only the
password is wrong.

Thanks again.

 

[Colin Nash [MVP]]

Hi,

Can anyone tell me how, if it is possilbe, to change the message displayed
to the user when he logs in incorrectly? For example, when a user enters
the wrong password he gets the message: "The Password is Incorrect. Type
the
Pas..... ".
I want to change this message to only display something like "Invalid
Logon
Attempt". So that the user, who might be a hacker trying to break into an
account, will not know if he got only the user-id wrong or the password
wrong
or both.

Thanks for any help regarding this. I think its a security issue when the
operating system gives hints that the username is correct and only the
password is wrong.

Thanks again.

Hmm on my PC (XP Pro) it gives the exact same error message "The system
could not log you on. Verify that the user name and password are
correct..." for incorrect usernames and incorrect passwords.

Basically the message tells you that you were not authenticated and doesn't
tell you the reason. In other words, it does exactly what you want.

You're using XP Pro? Maybe Home Edition gives more details (emphasis more
on home user ease-of-use than security) but I've never noticed that.