Can I Verify a Win2k User Password

[shannonp]

Can I use a Windows 2000 Login Name and Password to verify a user (using Windows Server).

How I was looking at it was that if someone tries to log in to my database then it will ask for username and password where MS ACCESS will then query the server and the server will return a flag indicating whether the details were correct...can this even be done???

note: sometimes the current user is not always the person that is logged into the machine at the time.

 

[Poteen]

Some people might interpret that as an attempt to write a password hacker!

 

[cheerio]

I think there are windows api calls to find out the current windows login name. You have no need for their password.

 

[shannonp]

hehe - I knew when I posted this that the issue of p/w hacking would come up. My post IS genuine / I know how to call the current users username...primarily I wanted to integrate Windows security with my DB...guess I can live with the multitude of workarounds though.

 

[Poteen]

You'd be better off with a custom 512/1024bit RSA. Windows 2000 security is a joke. The encoding method and key are now in the public domain. I read a very interesting article last year from the smart alek who cracked it. I'll see if I can dig up the details.
Regards,
John

 

[shannonp]

Thanks Poteen

Would be considerably interested in reading about that.