WinBatch Tech Support Home

Database Search

If you can't find the information using the categories below, post a question over in our WinBatch Tech Support Forum.

TechHome

How To
plus
plus
plus
plus
plus
plus
plus
plus
plus
plus
plus

Can't find the information you are looking for here? Then leave a message over on our WinBatch Tech Support Forum.

Validating Password


Question:

Is there a way to pass a password to a user account in active directory and have it return @true / @false? We want to authenticate a account without actually connecting to a resource.

Answer:

Sorry, no. Connecting to some resource (and trapping a possible error) seems the only way to do it.

And the reason for this is simple....

If it were possible for a non-privileged user account to call an API function that allowed for that user to "test" the passwords of other user accounts, then there would be absolutely nothing to prevent you from easily performing dictionary attacks. Password cracking would be trivially easy [instead of just plain old easy] in Windows.


Article ID:   W16484
File Created: 2005:02:18:12:20:54
Last Updated: 2005:02:18:12:20:54