Make your own GUI client for changing passwords. You can go to whatever extent with that you want from simply telling people to use it for proper messages to a full blown client that they have to use because you have disabled their native rights to change passwords and the tool calls back to some server process somewhere in some secure way and processes the work on their behalf.
 
  joe


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Santhosh Sivarajan
Sent: Thursday, December 02, 2004 6:51 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Custom Password Filter DLL

Thanks for the quick response.  What do you mean by the Custom Password Changer Client?  Third party software?

 
Sen



joe <[EMAIL PROTECTED]> wrote:

Nope, you can not customize the message in any easy way.
 
A common method around this is to force users to go through a website to change their password or use custom password changer clients so that custom messages can be displayed.
 
Modifying the GINA for this is a bit of work and would be hard coded to what you needed or it would have to come up with some method to talk to some dynamic source, it will not communicate with LSASS about what the issue is. For instance, lets say you deploy this GINA to 10k desktops and then you modify the filter again, unless you have a dynamic method to update the message the GINA displays you will have to build and deploy a new GINA. Plus you still won't correct the message people get if they use scripts or other exe's to change the password.
 
  joe
 
--
Pro-Choice
Let me choose if I even want a browser loaded thanks!
 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Santhosh Sivarajan
Sent: Thursday, December 02, 2004 6:01 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Custom Password Filter DLL

Hi all,

I am in a process of writing a custom password filter DLL.  I modified
the DLL and implemented it.  Password filter is working according our
requirements but my problem is, it is still displaying the default
password complexity message (7 char, 24 history..etc etc).  Is there anyway
I can modify the display message without modifying the GINA?   I found
GINA source code on MSDN but it looks so complicated to me.  Any
suggestions or recommendations?

Thanks in advance!
Sen

Reply via email to