credential-providers

Procedure to change Credential Provider GUID for deployment

雨燕双飞 提交于 2019-12-11 15:41:34
问题 I have modified the 'SampleAllControlsCredentialProvider' from Windows Vista samples using Visual Studio 2013. I need to change its GUID before deploying it to the production systems. I have generated the GUID using visual studio create gui tool and changed the GUID in .vcproj, .vcxproj and .sln files. Also, put the same GUID in register.reg file. Now, the registry entries are made with this new GUID but credential provider does not load. If I use the old GUID in register.reg (that came with

Windows Credential Provider in C#

早过忘川 提交于 2019-12-11 10:47:24
问题 i'm working on a school project where i'm supposed to modify the way credentials are provided in the windows Logon UI. After some of search i've found the famous Vista RTM (Longhorn) Samples and the Technical documentation. I've found that all the samples are developed in C++. Since i don't have any C/C++ experience and i consider myself a decent C# programmer i would like to know if it is possible to do this C#. I will also need to exchange data with a REST API to validate the login, so the

Windows Credential Provider Implementation

限于喜欢 提交于 2019-12-11 07:42:17
问题 This is a question related to Windows Credential Provider Implementation I want to follow up to this question. We have a custom MFA solution that prompts for sms/pin after windows has finished authentication before letting the user in. Unfortunately on windows 2016 and windows 10,winLogon.exe does not wait for the custom mfa solution prompt to close if there is no activity, it just happens to log the user in, defeating the purpose of having a mfa prompt. I have deployed a custom credential

Disabling areas on Credential Provider

瘦欲@ 提交于 2019-12-11 06:48:56
问题 I'm working on a credential provider for windows 7 with cpp. I want to disable textboxes and submit button while the system is working in the background. For this I tried to use the code below: _pCredProvCredentialEvents->SetFieldInteractiveState(this,SFI_EDIT_TEXT,CPFIS_DISABLED); At here SFI_EDIT_TEXT represents the object that I want to change it's properties and CPFIS_DISABLED shows it's should be disabled (at least i assume that is). But I didn't get any useful result. Anyone can able to

KSP (Key Storage Provider) not being loaded at logon via a Credential Provider

牧云@^-^@ 提交于 2019-12-11 06:36:11
问题 I am creating a Windows Credential Provider to logon into a Windows domain using certificates as described on this article. This implies creating a custom KSP that will be called by LsaLogonUser when creating an authentication package. I manage to create the custom KSP and tested it successfully in a standalone app that calls LsaLogonUser directly. Basically creating the authentication package and pass it to LsaLogonUser, loaded the KSP, called a bunch of functions and authenticated the user

Windows Credential provider - password expired while desktop locked

£可爱£侵袭症+ 提交于 2019-12-11 03:16:21
问题 im working on a credential provider and got stuck with the following issue: When the desktop is locked on a terminal server and the password expires, the CP cant seem to change the password. I can dectect that the password must be changed in ReportResult() , then open a dialog asking for the new password and packing a KERB_CHANGEPASSWORD_REQUEST to hand over in GetSerialization() . This works when the user logs on initially (CPUS_LOGON). But in CPUS_UNLOCK_WORKSTATION (when the user is

How to unlock windows login screen

妖精的绣舞 提交于 2019-12-11 03:04:46
问题 at first point I have to say that I know that this topic is not new and there are some existing topics on StackOverflow, but I didn't find any solution of my problem. I know that to unlock windows screen (Win 7 or 8) I must use Credential Provider so I download http://www.microsoft.com/en-us/download/details.aspx?id=4057 And write my code in pure C++. In my case the MS provided "SampleHardwareEventCredentialProvider" is perfect match. Also I read other SO thread and I know that "there are

Windows7 credential provider to automatically logon user on the hardware event

让人想犯罪 __ 提交于 2019-12-09 18:16:30
问题 I am developing a custom credential provider for Windows 7. My goal is to automatically log-in the user when a certain hardware event occurs. I have read all the MSDN articles related to this, and implemented a simple credential provider that interfaces with the external device to get user name and password and passes it to the WinLogon. But, I still am stuck with the last piece of the puzzle. Currently the user still has to press the logon button to log himself in. What is the best way to do

HTTPS Request From a Credential Provider DLL

一笑奈何 提交于 2019-12-09 13:17:00
问题 I've been creating a Credential Provider DLL that authenticates via the internet before allowing login. However this hasn't worked as well as I expected because my WinHTTP request isn't getting sent. I've confirmed this using wire shark. but I can't figure out why it's not sending any requests off. I've checked that my code is actually calling the functions properly - and they are. But the http request never makes it off. I'm slightly confused at this point and I'm seeking to know if there is

Smart Card Removal policy is not enforced when performing SSO using Custom Credential Provider

泄露秘密 提交于 2019-12-08 09:12:01
问题 I have created a EFI Pre-Boot Application were in I enter the user credentials which are passed to windows to logon (Single Sign On) using my credential provider. I have a Group policy "Interactive logon: Smart card removal behavior" set to "Lock Workstation: The workstation is locked when the smart card is removed, allowing users to leave the area, take their smart card with them, and still maintain a protected session." So if I reboot the machine and use login using my credential provider,