NT Authentication

[nwood]

Hello All,

I want to provide the availability for NT Authentication in my application when the application is launched. I can fetch the user name using the GetUser API, but I need to be able to snag the user password to match against the database of users for my app. Any ideas on which API I can call?

[shtirliz]

Hi,

I doubt you can use any sort of API to retrieve the password from SAM, unless you use a password recovery utility like Lph0... (forgot the name). But may I suggest that you use built-in NT security for your purpose.
1. Create a group like MYDBUSERS on the local system or Authenticating server.
2. Assign rights to this specific group.
3. Add users that are allowed to use your database.
4. Have your program check if a user is in your Group

You can use NetWkstaUserGetInfo function to retrive user info.

Hope that helps.

[JoshT]

l0phtCrack - excellent program, and its more of a "brute force password cracker" than a password recovery utility.

I don't think NT stores the password as anything but the hash.