RE: [GD-Windows] Getting an user's security details
Brought to you by:
vexxed72
From: Ivan-Assen I. <as...@ha...> - 2003-06-21 16:23:28
|
You are looking for a function like GetCurrentUserPassword() ? That's a very bad idea, and I'd be very surprised if such a function existed. Imagine someone walking in on to your PC while you're on lunch break and running a small exe calling that function. He would be able to gain much more control over your PC (and possibly your life, if you, like the vast majority of users, reuse passwords) than he has just by having temporary physical access. He could change your password. He could set your password to expire. He could log in with the same password to other services. Notice that Win2K-s own cron-like security service (Scheduled Tasks) asks you for a users's password when you specify you need to run a task as a certain password. Actually, Unices have been doing just fine for decades without having the passwords themselves stored anyway - just their one-way encrypted (hashed) form. regards, Assen PS. What's wrong with Scheduled Tasks? |