System authenticating against server?

[Steve21]

Hey,

 

Is it possible (or is it already working) that "system" on a computer can access a server or would it need to authenticate as a user/admin.

 

Playing around with adding some GUIs to Win7 logon screen, but was wondering if it's possible to add things like letting users reset passwords from there. Of course to access AD etc they'd need to auth against it as such. Not sure if it's doable.

 

Steve

[kevin_lane]

sounds good but only issue is that how can you get a user to reset their password if 1 they don’t know the old one and 2 what makes you think other people won’t try and reset other users password. Also how can a pupil reset their password when we have pupils who want to reset their password because they have forgot it. When a user wants to reset their password we make sure that they say who they say they are by looking them up in sims.

But when a computer boots up the server askes the computer to provide it with the computer password to make sure that the computer can and establish a connection with the server / domain this is allow the computer to authenticate users who are part of the “domain” and then the domain authorizes then user to be able to logon to that computer as long as no restrictions are in place for that user e.g. being only to allow to logon certain computer and at certain times etc

[Steve21]

Why would they need their password to reset it? It's no different to a user coming into the office and asking us to reset it, as it'd run prior to logon (aka at logon screen).

 

And yes they'd need some user checking, simple example being Date of Birth etc etc (But this wasn't only for passwords, just an example).

 

The problem is before someone logs on, "LocalSystem" is still running, Just wondering how that is seen by the server as such. Whether the exe would need to be run under a domain account, or if the localsystem account is high enough.

 

Thanks,

Steve

[kevin_lane]

humm most likely need to be a domain account with enough rights to change users password or maybe run under a local system account but the exe uses a domain account. Are you trying to cut down the number of people requesting password resets??

[Steve21]

Got a few ideas but just seeing what it can do currently

 

Thanks,

Steve

[kevin_lane]

lol if you get it working i wouldnt mind seeing a screen shot or something