|
Hello,
how can I create a littel process that listen to the
windows security when we enter the username and password?
I created a process that listen to all keyboard clicking
but it doesnt catch the security windows window (you know, when the
computer lock or something)
thanx.
|
|
|
|
|
First of all, don't cross post. Secondly, there is absolutely no justifiable reason to write software that captures security information like this.
|
|
|
|
|
O.K
really I'm not trying to get anyone password.
my reason is that I'm an administrator at my company
and we have a few computers with password for the employee
that we send to our customers but they have a kind of a window lock
when they enter a incorrect password and the windows lock it self
after 3 attempts .our employee swear us that they enter the password correct and we cant find the reason for all the locks.
it cost us a lot of money all those day the cant work beacuse the computer
lock it self. we want to find out if they entered the correct password
before the computer lock.
hope its a good reason.
thanx
|
|
|
|
|
Ok...that's a better explanation of what you are trying to do. However, it still isn't a justifiable reason.
The best way to do this is by using the Windows security event logging. If you run the "Local Security Policy" control panel applet, you can configure the auditing activities under the "Local Policies\Audit Policy" key. This will give you the ability to log the logon and logoff actions of the user and the reason (bad username or password, for example) for the failures.
You can also control how many attempts it takes to lock the account and how long before the account is automatically unlocked (this may be on Vista only, I'm not sure).
|
|
|
|
|
hi scott,
When i think of it i really dont need the all passwords only
the incorrect ones!
what you are saying , it will give me the ability to see all the logs of
logging window?
how do i configure the ability audit policy?
thank you.
|
|
|
|
|
To configure the audit policy, you need to run the "Local Security Policy" management console. This is normally available under the "Administrative Tools" section in Control Panel. It may also be available from the "Administrative Tools" Program Files menu option. If you don't see it there, the actual command line you need to run is: %SystemRoot%\system32\secpol.msc /s
In the tree (on the left side of the window) there should be a node named "Local Policies", expand that and then select the "Audit Policy" node. That should display a list of policies and the associated setting. At a minimum, you probably want to turn on the following policies:
- Audit account logon events
- Audit logon events
If you want to change the account lockout policies, you would expand the node named "Account Policies", and then select the "Account Lockout Policy" node. (This is the one that might not be available to you depending on the OS.)
Keep in mind that you need to do this from the computer that you need to change the policies on...you can't change these remotely from another computer.
|
|
|
|
|
scott,
thank you but it ain't helping me.
The event only write :
Logon Failure:
Reason: Unknown user name or bad password
I still ain't getting the incorrect password they entered.
It still can be a bug in the application. it happening only
after hibernation.
I cant get the password?
thank you!!!
|
|
|
|
|
eleateam wrote: I still ain't getting the incorrect password they entered.
And you never will. Logging what the user typed is, itself, a security violation. There is nothing that will tell you what the users password is, nor is there anything that will tell you what the user typed. The reason being is that it gives you information about what the password is NOT.
The bottom line is that the user is not giving the proper password for the domain selected. It's that simple.
The reason why noone is going to tell you how to write is keylogger is because it can be easily abused, no matter what it's true purpose is.
|
|
|
|
|
You CANNOT get the password. Period.
Think about it. If you can get their password, then someone can get your password.
On the other hand, you can reset their password if you are an administrator. 
“If we are all in agreement on the decision - then I propose we postpone further discussion of this matter until our next meeting to give ourselves time to develop disagreement and perhaps gain some understanding of what the decision is all about.”-Alfred P. Sloan
|
|
|
|
|
FYI, if they are part of a Wondiws server 2003 domain you have the same granular control of the user log on process.
“If we are all in agreement on the decision - then I propose we postpone further discussion of this matter until our next meeting to give ourselves time to develop disagreement and perhaps gain some understanding of what the decision is all about.”-Alfred P. Sloan
|
|
|
|
|
No. Doesn't sound nice at all.
"Real programmers just throw a bunch of 1s and 0s at the computer to see what sticks" - Pete O'Hanlon
|
|
|
|
|
hi all,
can sql is suppport by all os specially mac and linux.
And give me idea about which database is supported by all os (mac/linux/windows).
help me please......
Thank You in advance
Senthil.S
Senthil S
Software Engineer
|
|
|
|
|
I answered this yesterday...
SQL is supported everywhere. SQL Server is another thing. MySQL may be an option. Of course, you can't run VB code in Mac or Linux.
Christian Graus - Microsoft MVP - C++
"also I don't think "TranslateOneToTwoBillion OneHundredAndFortySevenMillion FourHundredAndEightyThreeThousand SixHundredAndFortySeven()" is a very good choice for a function name" - SpacixOne ( offering help to someone who really needed it ) ( spaces added for the benefit of people running at < 1280x1024 )
|
|
|
|
|
I suggest looking at Christian's reply
"Real programmers just throw a bunch of 1s and 0s at the computer to see what sticks" - Pete O'Hanlon
|
|
|
|
|
XML and CSV.
“If we are all in agreement on the decision - then I propose we postpone further discussion of this matter until our next meeting to give ourselves time to develop disagreement and perhaps gain some understanding of what the decision is all about.”-Alfred P. Sloan
|
|
|
|
|
i am involved in a project in which i have to check the browser installed activex controls. this check has to be performed by the browser itself.
can anyone suggest me how to do this.
thanks in advance
|
|
|
|
|
Hi,
I can enable/disable the hibernate facility in winxp through code by sending "HIBRENATE on"/"HIBERNATE off" option to powercfg.exe in system32. which is the equivalent option available in windows 2000. There is no powercfg.exe in windows 2000.
Can i use the same winxp method in vista as well.
DavidJohn
|
|
|
|
|
Hi Experts!
I have Window XP(SP-2). There are 2 accounts.
1.Admin
2.computer world
now I forgot the password of Admin  . So I can only login into 2 account. I want to recover my Admin password. How can I do that? One person suggest me to do format the harddisk(C: drive). But I dont want to format it.
Please help me.
Keep Smiling
|
|
|
|
|
I've run into this too.
Here's what to do:
1.) Goto www.ultimatebootcd.com, then download and burn an image to a CD.
2.) Boot up the disk and navigate to the "Offline NT Password and Registry Editor".
3.) When you run the program, it will boot up a small linux distro, you can use this to blank out or change the Administrator password.
If you cant figure out the "Offline NT Password and Registry Editor", or you don't feel comfortable using it, you can follow the walkthrough here:
http://home.eunet.no/~pnordahl/ntpasswd/walkthrough.html[^]
This is probably the safest, easiest, and quickest way that I have found to recover a lost or forgotten Administrator password.
Have fun...
|
|
|
|
|
Well you could use one of those password reset disks, but then you must have created one on that account before you forgot the password, since you probably dont have one handy, then that wont help, but consider using them in the future.
The only other thing that comes to mind right now is to use a boot CD which mods the registry files, to set the password for X account to "". Google for NT passs reset boot cd or something like that. I think some of them might be unix based.. (not sure, but i know they exist)
It will of course reqire that you can boot of a CD on the machine..
edit:
Seems like ruready511 beat me too it
//Johannes
|
|
|
|
|
I think There is one safest way to do so, Is to formate the drive and reinstall windows again... 
Have a good day... 
Believe Yourself™ :->™
|
|
|
|
|
If 2 (Computer world) User has admin rights then u can reset the Admin password.....
If U Get Errors U Will Learn
If U Don't Get Errors U Have Learnt
|
|
|
|
|
Hi
I am trying to run Clipper, an ancient compiler, on a VM 2003 server. I am getting
16-bit MS-DOS Subsystem<br />
c:\windows\system32\cmd.exe - clipper.exe<br />
C:\WINNT\system32\config.nt The system file is not suitable for running MS-DOS and Microsoft Windows applications. Choose 'Close' to terminate the application.<br />
I've also tried launching Command.Com with the same error. I've checked the MS KB[^] for this and modified the Config.NT to the same as it was on the original NT4 box we're porting from, but still get the same error.
<br />
CONFIG.NT<br />
dos=high, umb<br />
device=%SystemRoot%\system32\himem.sys<br />
files= 255<br />
The KB talks about setting the Config.NT on a 2003 server, but as I am a total newbie where VMWare is concerned, do I have to do anything special when running under a virtual machine?
Cheers
Malcolm
Small angry dogs
|
|
|
|
|
my app uses the tmp / temp environment settings. Obviously (doh!) dating back some 10-15 years, only 8.3 filenames were allowed.
Changing temp from c:\documents and settings\on and on and on\tmp to E:\tmp worked a treat.
Small angry dogs
|
|
|
|
|
I am almost at wits end here!
This past summer (July roughly), I performed a few upgrades to my WinXP machine:
Windows Service Pack 2 (mailed off for CD)
DirectX 9c
Media Player 11
and purchased Pinnacle Studio Ultimate (ver11...)
Anyways, some combination of these three has totally dicked up my system where that playing DVDs is literally impossible, several of my apps (related to graphics) are forever hosed.
I lost my ATI TV tuner (USB edition) - granted this is pretty old (2001/2002), but I really liked its simple ability to watch/capture TV on the PC.
Nero (Nero Showtime) can't playback DVDs - I have to completely turn off the hardware accelerators and still iffy.
Media Player 11 cannot play DVDs
My question is... is there a location for previous version of Direct X?
I think it is F!-bogus that a lot of updates/upgrades basically forces the consumer into buying a new system while the fat cats (MS) just keep making blood money 
John John
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
