Verifying an account password without modyfying the last logon

[Brian Stoop]

Is there a method of checking that a Windows Local or Domain account

password matches a given password, without the account last logon date being

modified?

E.g: if I check the password based on a successfull $IPC share, then the

Last Logon date of the user changes, i would like to avoid this date

changing.

thanks, B

 

[S. Pidgorny]

There's a reason that attribute exists and gets updated by the DC. If you'll

find a way of doing that (bar going back to Windows 200 domain) - please let

us know, that would be considered a security issue with Windows.

--

Svyatoslav Pidgorny, MS MVP - Security, MCSE

-= F1 is the key =-

http://sl.mvps.org http://msmvps.com/blogs/sp

"Brian Stoop" <b.stoop@consultant-spam.free.com> wrote in message

news:OnkyFyq3IHA.1428@TK2MSFTNGP06.phx.gbl...<span style="color:blue">

> Is there a method of checking that a Windows Local or Domain account

> password matches a given password, without the account last logon date

> being modified?

>

> E.g: if I check the password based on a successfull $IPC share, then the

> Last Logon date of the user changes, i would like to avoid this date

> changing.

>

>

> thanks, B

> </span>

 

[Brian Stoop]

Thanks.

"S. Pidgorny <MVP>" <slavickp@yahoo.com> wrote in message

news:ulcDYjy3IHA.1204@TK2MSFTNGP04.phx.gbl...<span style="color:blue">

> There's a reason that attribute exists and gets updated by the DC. If

> you'll find a way of doing that (bar going back to Windows 200 domain) -

> please let us know, that would be considered a security issue with

> Windows.

>

> --

> Svyatoslav Pidgorny, MS MVP - Security, MCSE

> -= F1 is the key =-

>

> http://sl.mvps.org http://msmvps.com/blogs/sp

>

> "Brian Stoop" <b.stoop@consultant-spam.free.com> wrote in message

> news:OnkyFyq3IHA.1428@TK2MSFTNGP06.phx.gbl...<span style="color:green">

>> Is there a method of checking that a Windows Local or Domain account

>> password matches a given password, without the account last logon date

>> being modified?

>>

>> E.g: if I check the password based on a successfull $IPC share, then the

>> Last Logon date of the user changes, i would like to avoid this date

>> changing.

>>

>>

>> thanks, B

>></span>

>

> </span>

 

[Alun Jones]

"Brian Stoop" <b.stoop@consultant-spam.free.com> wrote in message

news:OnkyFyq3IHA.1428@TK2MSFTNGP06.phx.gbl...<span style="color:blue">

> Is there a method of checking that a Windows Local or Domain account

> password matches a given password, without the account last logon date

> being modified?

>

> E.g: if I check the password based on a successfull $IPC share, then the

> Last Logon date of the user changes, i would like to avoid this date

> changing.</span>

Consider that "Last Logon" actually means "Last time password was presented

for authentication"...

Alun.

~~~~