User Authenticaton Windows 2000

[henrycortezwu]

Hi,
I tried many times to convert the ff code to .NET but I fail to have
it converted.

http://support.microsoft.com/default.aspx?scid=kb;en-us;279815

I would like to use the above link to authenticate the current user of
the computer in windows 2000 platform.

I have a code that works with Windows XP using the Login API, but sad
to say, it fails at Windows 2000.

Anyone could help me on this???

Thanks,
Henry

 

[Crouchie1998]

henry,

I have described below a work around, but DON'T DO IT!!!

LogonUser API fails on Windows 2000 because you need to set SE_TCB_NAME (Act
As Part Of The Operating System) & if you do that then there is no security
whatsoever in Windows 2000.

To set this attribute you can do the following:

Click START | SETTINGS | CONTROL PANEL

Click 'Administrative Tools' & Select 'Local Security Policy'

Now, expand 'Local Policies' & click on 'User Right Assignments'

In the right pane, double-click 'Act As Part Of The Operating System', add
the users you want to authenticate with the LogonUser API, click OK & OK
again.

Close the Local Security Settings dialog & now the LogonUser API will work.

NOTE:
-------

You now have no protection on this machine whatsoever. I cannot stress
enough how you should NOT change that 'Act As Part Of The Operating System'
flag!!!!!!!!!!!!!!!!!!!!!! as I described above.. Basically, FORGET ABOUT
USING THE LOGONUSER API function.

If someone hacks, deletes the entire operating system because you set this
flag then I would be the first to say 'I told you so'.

YOU HAVE BEEN WARNED!!!!!!!!!!!!!!!!!

Crouchie1998
BA (HONS) MCP MCSE

 

[Crouchie1998]

Here is a VB.NET article on LogonUser API:

http://support.microsoft.com/default.aspx?scid=kb;en-us;841699

LogonUser Function:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/secauthn/security/logonuser.asp

Crouchie1998
BA (HONS) MCP MCSE

 

[henrycortezwu]

Hi, I see what you mean, but I believe this will make the user an
"admin" as well, which in the company I'm working from, that would not
do.

The link http://support.microsoft.com/default.aspx?scid=kb;en-us;279815
shows a sign of hope that it can work. If anyone was able to convert
this to vb.net, please do post it here.

Thanks,
Henry

 

[Crouchie1998]

Surely, you can convert this code - its simple!1

Crouchie1998
BA (HONS) MCP MCSE

 

[henrycortezwu]

Hi Crouchie,
I tried using the VB.NET version in the ff site:
http://groups.google.com.ph/group/microsoft.public.dotnet.general/msg/e367cc3d311a6a5f?hl=en

No errors found on the conversion, and it is a fully converted one.

Problem is, SSPValidateUser function always returns true whatever
value I gave it.

Upon studing the SSPValidateUser function, I couldnt see when the
SSPValidateUser will ever become false .

Any insights?

Thanks,
Henry