RE: [ActiveDir] Custom Password Filter DLL

[joe]

Nope, you can not customize the message in any easy way.

 

A common method around this is to force users to go through a website to change their password or use custom password changer clients so that custom messages can be displayed.

 

Modifying the GINA for this is a bit of work and would be hard coded to what you needed or it would have to come up with some method to talk to some dynamic source, it will not communicate with LSASS about what the issue is. For instance, lets say you deploy this GINA to 10k desktops and then you modify the filter again, unless you have a dynamic method to update the message the GINA displays you will have to build and deploy a new GINA. Plus you still won't correct the message people get if they use scripts or other exe's to change the password.

 

  joe

 

--
Pro-Choice
Let me choose if I even want a browser loaded thanks!

 

---

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Santhosh Sivarajan
Sent: Thursday, December 02, 2004 6:01 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Custom Password Filter DLL

Hi all,

I am in a process of writing a custom password filter DLL.  I modified
the DLL and implemented it.  Password filter is working according our
requirements but my problem is, it is still displaying the default
password complexity message (7 char, 24 history..etc etc).  Is there anyway
I can modify the display message without modifying the GINA?   I found
GINA source code on MSDN but it looks so complicated to me.  Any
suggestions or recommendations?

Thanks in advance!
Sen