Intercepting Change Password in Windows - Showing our custom interface

Question

Hello all

I've been trying to synchronize the profile passwords of a third party system with AD. The third party system has its user profiles stored in a database.

I initially tried of writing a password filter to get the password in clear text and updating it in the database. Later i learnt that it is extremely risky to mess with the internals.

Now i'm thinking to intercept some event like 'begin change password' and show my custom interface to change the password instead of the default one. I know i cant intercept Ctrl + Alt + Del. But can i intercept this change password event and suppress the default behavior?

I'm looking for a generic solution that works in all the editions of Windows XP, Windows Vista and Windows 7.

Thank you.

Answer 1

On XP/Server2003, you'd probably have done this by writing some GINA extension/replacement for the winlogon system. (Docs).

From Vista, these mechanisms were replaced by something called ICredentialProvider.

(So I suspect you're out of luck for a generic solution).