Verifying an account password without modyfying the last logon

[Brian Stoop]

Is there a method of checking that a Windows Local or Domain account
password matches a given password, without the account last logon date being
modified?

E.g: if I check the password based on a successfull $IPC share, then the
Last Logon date of the user changes, i would like to avoid this date
changing.


thanks, B

 

[S. Pidgorny]

There's a reason that attribute exists and gets updated by the DC. If you'll
find a way of doing that (bar going back to Windows 200 domain) - please let
us know, that would be considered a security issue with Windows.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

"Brian Stoop" <b.stoop@consultant-spam.free.com> wrote in message
news:OnkyFyq3IHA.1428@TK2MSFTNGP06.phx.gbl...
> Is there a method of checking that a Windows Local or Domain account
> password matches a given password, without the account last logon date
> being modified?
>
> E.g: if I check the password based on a successfull $IPC share, then the
> Last Logon date of the user changes, i would like to avoid this date
> changing.
>
>
> thanks, B
>

 

[Brian Stoop]

Thanks.

"S. Pidgorny <MVP>" <slavickp@yahoo.com> wrote in message
news:ulcDYjy3IHA.1204@TK2MSFTNGP04.phx.gbl...
> There's a reason that attribute exists and gets updated by the DC. If
> you'll find a way of doing that (bar going back to Windows 200 domain) -
> please let us know, that would be considered a security issue with
> Windows.
>
> --
> Svyatoslav Pidgorny, MS MVP - Security, MCSE
> -= F1 is the key =-
>
> * http://sl.mvps.org * http://msmvps.com/blogs/sp *
>
> "Brian Stoop" <b.stoop@consultant-spam.free.com> wrote in message
> news:OnkyFyq3IHA.1428@TK2MSFTNGP06.phx.gbl...
>> Is there a method of checking that a Windows Local or Domain account
>> password matches a given password, without the account last logon date
>> being modified?
>>
>> E.g: if I check the password based on a successfull $IPC share, then the
>> Last Logon date of the user changes, i would like to avoid this date
>> changing.
>>
>>
>> thanks, B
>>
>
>

 

[Alun Jones]

"Brian Stoop" <b.stoop@consultant-spam.free.com> wrote in message
news:OnkyFyq3IHA.1428@TK2MSFTNGP06.phx.gbl...
> Is there a method of checking that a Windows Local or Domain account
> password matches a given password, without the account last logon date
> being modified?
>
> E.g: if I check the password based on a successfull $IPC share, then the
> Last Logon date of the user changes, i would like to avoid this date
> changing.

Consider that "Last Logon" actually means "Last time password was presented
for authentication"...

Alun.
~~~~