Tag Info

Hot answers tagged

4

Microsoft ACS does this very well. It is a component of System Center Configuration manager. You can look at the logon failures from the DC perspective or from the client perspective depending on your specific needs. There are MS Partner Solutions that also aid in this from the Management Pack side as well as the ACS reporting side. Full Disclosure: I ...


4

For a central solution, use one of the Windows syslog providers to forward security log entries to a central syslog aggregator. Watch for the right events and then take whatever actions you want after that. Same deal as in the UNIX world. Back in my Windows days we used NTsyslog on each host to feed the event log into a server running SL4NT. SL4NT is ...


4

If you have a Windows laptop which is a domain member, using winbind offline logon would not influence its ability for cached credential logons as Winbind is caching the credentials for your Samba installation, not its clients. Cached Credentials is a domain client feature available in Windows 2000 and newer. It is working with Active Directory DCs as well ...


3

Many software vendors override the Logon UI to run programs such as Fingerprint or Facial Recognition scanning software. So yes you can override the default Windows Login UI even up to Windows 7. However, it is only available to perform login operations. You won't have access to certain system resources like mapped drives. So if the intent was to be able ...


3

regedit hacks - (prevent) shutdown without logon: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] "shutdownwithoutlogon"=dword:00000000 works up to XP - haven't tried it with >= win7 Ctrl+Alt+Del when logged on: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer] "NoClose"=dword:00000001 ...


2

What you could do in this case, is to create a windows service running with LocalSystem privileges and communicate with it with your credentials provider. When a user enters his/her credentials to the ICredentialsProvider, the would contact the windows service and the service will handle the authentication. Upon a successful authentication, the service ...


2

Sadly, you can't use GINA for Vista. Vista uses Credential Providers. Have you looked at parsing the Security Event Log? It's not pretty but it avoids mucking with GINA.


2

To do what you're looking for in the easiest manner possible you really want a Windows Domain (as @Joel Coel says in his comment). You don't have to use Windows Server to host the Domain-- Samba has worked fine in that role for years now, and Samba can back-end authentication into LDAP. Using a Windows Domain for this is preferable to any alternatives ...


2

Have you considered using Microsoft SteadyState? There's also a utility that allows you to easily enable or disable Task Manager.


1

@Jonas: When you say "monitor failed log on attempts on-the-fly", do you mean you want something that reacts in real time to a failed log on? Or do you want to be able to run something that will tell you how many failed logons there has been, say, for a machine over a specific time period?


1

If you just want to make a small number of changes to profiles then you might consider using Active Setup. Once you set this up on the machine it will run just after the user's profile loads, and you can then make user-specific changes to their files/settings etc.



Only top voted, non community-wiki answers of a minimum length are eligible