winLogon

[Guest]

hi,

I read that WinLogon triggers notification events, include logon, logoff,
etc. Can someone help me to understand if the logon event is triggered after
the user successfully logged on? Or is it triggered when WinLogon is about to
do the logon process?

Thank you very much for your help!
-Vikki

 

[Wesley Vogel]

I don't remember where I found these.

UserInit Key This key specifies what program should be launched right after
a user logs into Windows. The default program for this key is
C:\windows\system32\userinit.exe. Userinit.exe is a program that restores
your profile, fonts, colors, etc for your username.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
NT\CurrentVersion\Winlogon\Userinit

Notify - This key is used to add a program that will run when a particular
event occurs. Events include logon, logoff, startup, shutdown,
startscreensaver, and stopscreensaver. When Winlogon.exe generates an event
such as the ones listed, Windows will look in the Notify registry key for a
DLL that will handle this event.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\Notify

 

[Guest]

Hi Wes,

Thanks so much for your response.

I actually want to find out if the logon event triggered by WinLogon happens
before WinLogon actually contacts LSA or after.

Do you know where I may be able to find the answer?

Best Regards,
-Vikki

 

[Wesley Vogel]

Hi Vikki,

You lost me on that one. All I can think of is

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

Which has something to do with security authentication.

Beats me. ;-(

Try posting in...

microsoft.public.windowsxp.security_admin

 

[Torgeir Bakken \(MVP\)]

I read that WinLogon triggers notification events, include logon, logoff,
etc. Can someone help me to understand if the logon event is triggered after
the user successfully logged on? Or is it triggered when WinLogon is about to
do the logon process?

Hi

You should find something in the link here, especially in the
"Interaction Between Winlogon and GINA" topic link:

Platform SDK: Security
Winlogon and GINA
http://msdn.microsoft.com/library/en-us/security/security/winlogon_and_gina.asp