With Vista onwards this can be done via a Credential Provider plug-in. No need to replace the GINA anymore.
Cheers Ken From: Michael B. Smith [mailto:[email protected]] Sent: Friday, 17 February 2012 2:54 AM To: NT System Admin Issues Subject: RE: Self-Service Account Unlock There are a couple of them out there - but they aren't cheap - and I don't recommend it. Putting the recovery button on the logon screen requires a "custom GINA". A new custom GINA is required every time specific pieces of the Windows kernel are updated (I think it's lsass.exe, but I'm not 100% on that and can't investigate right now). Which definitely happens by each service pack and may happen many patch Tuesdays. I think it's better for someone to walk to the office next door, or borrow their neighbor's computer for a couple of minutes. From: Sean Rector [mailto:[email protected]]<mailto:[mailto:[email protected]]> Sent: Thursday, February 16, 2012 1:45 PM To: NT System Admin Issues Subject: Self-Service Account Unlock I've been looking through the multitude of options, but they all seem to be web-portal-based. Is there one that puts the Unlock option on the Logon Screen? My point is - what's the use of a web-portal version when they can't log on to their machine? A kiosk-type user account doesn't seem the safest route to go. Sean Rector, MCSE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
