How do I develop a lock screen software and monitor processes ?

It sounds as if you want to develop a Credential Provider (or, for XP or Server 2003 and earlier, a GINA dll). It would be best if you can write it so that it calls to the standard Credential Provider (or for a GINA, sits on top of the standard GINA), to avoid you having to write the authentication code.

For Credential Providers, start here:
http://msdn.microsoft.com/en-gb/library/windows/desktop/bb648647(v=vs.85).aspx

There are also links to information about the GINA for pre-Vista / pre-Server 2008. I don't think a GINA could be written in C#; it would need to be C/C++. However, I believe a Credential Provider would be easier to write in C#.


I'm not entirely sure what you mean by "disable ctrl+alt+del". Why would you want to do that?
Other than this, all the other things you ask in items 1-3 are provided as standard by the default Credential Provider.


To detect a list of installed programs on your computer you would either need to query the installation information in the registry (but unfortunately I can't provide any more information than that at present), or perhaps search for executable file types on your hard disk(s).

Regards,
Ian.

Hi afrika1,
I don't think your different requirements do necessarily follow from each other.

The Windows Credential Providers sit in Session 0, and gets called by the authentication sub-system. You might be able to write one to modify the look and feel of the logon screen (I'm straying into an area I'm rather unfamiliar with), but you wouldn't use it for tracking what processes a user is running, or for preventing them from running any.

It sounds as if you want:
1) Customisation of the logon screen
2) Clamp down of what users can run and/or access when they are logged on
3) Auditing of what the users are doing when they are logged on.

I think in fact you should be able to do all of these without any coding, but maybe with optionally getting some third party products.

I'm afraid I'm no expert on these, but here are some ideas:

1) The Windows Logon screen is "brandable" - background screen, and from Windows 7 even the logo. (See, e.g. http://www.addictivetips.com/windows-tips/how-to-change-windows-7-logon-branding/[^])
Search the web for "Windows Credential Providers", "Customise Windows Logon", etc.

2) You should look into the myriad of options there are for clamping down Windows. E.g. you can prevent Task Manager from being run, or prevent certain actions from being carried out in it (such as shutdown, etc); prevent access to the desktop properties; remove access to the run command, etc, etc. They're all built in to windows.
For full control, you might want some third party software to prevent certain applications from running (you may even be able to do it with your anti-virus software) - or more to the point, only allow certain applications to run.
If you are using Group Policy on your system, you can set that to limit what applications can be run: http://msdn.microsoft.com/en-us/library/ms811966.aspx[^]

3) As for auditing, Windows has some built in (for some info see http://social.technet.microsoft.com/wiki/contents/articles/325.advanced-security-auditing-in-windows-7-and-windows-server-2008-r2.aspx[^]) but there are also COTS products available.

I hope that helps some.

Furthermore, if you only want to allow users to be able to browse the internet, there is a university library near me that has public access computers where the user can literally only use Internet Explorer. If they close it, the screen is blank, and a new session of IE starts. Not sure of the settings required for that, but shows that it can be done. Perhaps some more research is required.

Sorry if it's not useful - having never used a Cyber Café, I don't entirely know what you are wanting to do.

Regards,
Ian.

thanks for your reply,


Answers to Richard MacCutchan

1. There is nothing wrong with the windows logon. We just would prefer to do something inhouse as well to monitor and restrict users ( In our own way )

... HENCE REASON AM ASKING.

2. I dont know if its a service, as i said i have been more into web and now want to do something custom.



To answer Ian A Davidson

Whats most important for my question is how to develop number 1 above, the others will follow once we get 1 up and running.


To elaborate more, is that we ( My partner ) am looking to develop something similar to a software you see on a cybercafe that will run and monitor users both on the client computers and our windows server.

Please advice on how to go about this

many thanks
Ehi

thanks again Ian,
but am not looking to customise the windows logon.

I do appreciate your replies and advise, but as I asked very simply.

We are looking to develop a software that would run AFTER ( I REPEAT ) After the user logs in, even the administrator to control the screen.

We have our reasons for this, which I rather not say on here.

many thanks
Ehi