Unique Windows XP Authentication

[3iron3]

hi,

I need some help to do the following: i want to use a unique
authentication/logon process for Windows XP (instead of the
original Windows logon). This means that before the logon
dialog box appears i want to use my own authentication mechanism
(It uses USB drive as a hardware key, in combination with free
software tools and asymmetric cryptography with a radius server.)
If the authentication fails, /for example no USB drive/ the
original logon dialog box should appear.

Well, some of the main questions are i think:
- how can i execute my own logon application before the windows
logon dialog box appears? (maybe as a service??)
- if the logon succeed, how can i step over the original logon
dialog box and go straight to the desktop?

thx any help in advance

 

[Steve Riley [MSFT]]

Why do you want to do this? Is there something wrong with the existing
choices? Writing your own authentication method is rarely a good idea. It's
some of the most difficult code to write securely.

Help me understand your business or technical need; perhaps I can suggest an
alternative that doesn't require replacing a fundamental component of the
operating system.

 

[3iron3]

Well, i'm a student&part of a project in the university where this is the
main problem. But now i know that i should wite my own gina. i hope i can do
this but i'm afraid it won't be easy...

have a nice day

 

[Anteaus]

Here's one I made earlier:

http://mylogon.net

Add your USB-detection code in place of the logon GUI.

 

[3iron3]

ty, this must be very helpful to me

Here's one I made earlier:

http://mylogon.net

Add your USB-detection code in place of the logon GUI.

 

[Steve Riley [MSFT]]

Hm, strange assignment, and actually doesn't have much value these days. The
GINA is deprecated; it's no longer used in Windows Vista or Windows Server
2008 and will not be used in any future version of Windows. I'd recommend
you have your instructor reconsider the assignment.

--
Steve Riley
(e-mail address removed)
http://blogs.technet.com/steriley
http://www.protectyourwindowsnetwork.com

 

[3iron3]

Well, first of all, thx for the reply
So, if GINA is not used in Vista then what is?
Is it possible to do the same thing in Vista & if it is, how?

thx in advance

 

[Steve Riley [MSFT]]

Windows Vista and Server 2008 have replaced the GINA with a credential
provider model with a pluggable architecture. Start your research by reading
about the new ICredentialProvider interfaces.

Landing page for identity management and access control:
http://technet.microsoft.com/en-us/library/cc749433.aspx

Some samples:
http://www.microsoft.com/downloads/...56-77b4-48c4-8b58-35b7295d6c2c&displaylang=en

However, I still question the assignment your instructor gave you. What is
he trying to have you learn?


--
Steve Riley
(e-mail address removed)
http://blogs.technet.com/steriley
http://www.protectyourwindowsnetwork.com