Activity for Password Filter DLL
-
snowdvl posted a comment on ticket #5
Hi Soisik Could it be that you had the option SkipComp enabled? Because I think there is a bug in the util.cpp file. I'm no C++ expert. But at line 216 and 217 you will find the following statement. // Get mutex - unfortunately, this whole section must be mutually exclusive so that the log doesn't get garbled by overlapping writes from multiple threads // ** Must be released before return! However in the skipcomp if block (line 228 - 237) PSHK_SUCCESS got returned without closing the log and releasing...
-
soisik posted a comment on ticket #5
Actually, it didn't work: after a few hours, password change processes hanged again. It seems the loglevel is just delaying the freeze of the DLL...
-
Ragnarok posted a comment on ticket #5
thanks, i will try your workaround
-
We've experimented the same problem in WinSRV2016: the first password change is immediate but subsequent changes hangs for several minutes and sometime indefinitely, forcing a reboot. We have found that it only happen when logLevel is 0 or 1; Setting logLevel at 2 or 3, the execution of the script do not hang anymore.
-
Laurent FRANCFORT posted a comment on ticket #5
I did several tests at different customer sites, and it seems that the password filter works well with Windows Server 2008 R2 and Windows Server 2019, but has issues with WinSRV2012 and WinSRV2016. When installed on a WinSRV2012R2/2016 box, LSASS hangs when it receives a password change request (new user, change password through ADU&C or CTRL-ALT-DEL...) I didn't understand why LSASS freeze.
-
Hi, do you know if password filter is compatible with Azure Active Directory self service Password Reset (SSPR) feature ? Details are provided here : https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks To be compatible, the password filter needs to be configured to apply in the admin password reset scenario.
-
Sébastien GENESTA created ticket #4
Windows server 2016 - DLL not loaded
-
david posted a comment on ticket #6
I continue trying to make run the passwdhk. I found that the problem is that the DLL is not correctly loaded. I have the 16953 error. I tryed too in and WinServer 2019 completly actualize and had the same error.
-
Passwdhk in server 2016
-
I have same issue on 2012R2 with only 1 server acting as DC. Also, after few hours the i cannot join pc's to domain or adduser, change password, etc... It's hang and i need to restat the server to work again :( event log do not show anything related.. any idea?
-
I have same issue on 2012R2 only 1 server ad DC after few hours the i can join pc's to domain or adduser, etc... It's hang and i need to restat the server to work again :( event log do not show anythin related.. any idea?
-
Hi, I did the following : Add a Windows Server 2012 R2 as DC to the same domain Install password filter on this WinSrv2012 server Execute a lot of password modifications on this specific server. Everything ran fine. So it seems the issue is not with AD, but with the DC OS.
-
Password change/set hang after a few hours
-
Igor chistruga posted a comment on ticket #4
Hi, I've installed the latest Visual C++ 2017 Redistributable package which solved the issue. Thank you.
-
Could not set Password Filter on Windows Server 2012 x64 DC
-
Curtis Robinson modified ticket #2
Window Server 2016 & .Net Framework 3.5
-
RE: Security
-
This software is only as secure as the server it is installed on. This DLL runs as SYSTEM user since it runs under the LSASS.exe process. Also, this DLL calls external programs on the server defined by the system admin, so these external programs need to be secured as well.
-
Version 1.2.0 includes the required VC++ runtime.
-
Ignore Computer Accounts
-
The feature is implemented in version 1.2.0
-
Update Change Log
-
Password Filter DLL released /passwdhk/1.2/passwdhk-x64-1.2.0-setup.zip
-
-
Add two registry entries
-
Add new registry entries
-
Revert "Add two registry entries"
-
Revert "Revert "Add two registry entries""
-
Update logging with new registry entries
-
Change target to match Server 2016 .NET version
-
Add Skip Computer Accounts Feature
-
Add Skip Computer Accounts Feature
-
Add gitignore
-
Cleanup
-
Update loadlibrary to wchar supported library
-
Update Platform Toolset to Windows 10
-
Add required library to DLL
-
Add VC++ runtime to setup
-
Found out the issue is the DLL is looking for another DLL called "vcruntime140.dll". As a workaround, it can be downloaded from Microsoft: https://www.microsoft.com/en-us/download/details.aspx?id=52685.
-
Found out the issue is the DLL is looking for another DLL called "vcruntime140.dll". As a workaround, it can be downloaded from Microsoft: https://www.microsoft.com/en-us/download/details.aspx?id=52685. I need to remove this dependence is not required by the DLL and Visual Studio added it.
-
I am able to reproduce the error. Looking into a fix.
-
John Woods posted a comment on ticket #2
Tried to install the 1.1 msi version, and could not get it to work, even after installing .Net 4.7.1. Upon reboot of the server, we are getting an event in the System event log: Event ID: 16953 Source: Directory-Service-SAM General: The password notification DLL passwdhk failed to load with error 126. Please verify that the notification DLL path defined in the registry, HKLM\System\CurrentControlSet\Control\Lsa\Notification Packages, refers to a correct and absolute path (<drive>:\<path>\<filename>.<ext>)...
-
It is available, now
-
This is fixed.
-
64bit installer is broken
-
passwdhk.dll for W2003 64 bits
-
This should be fixed.
-
A new MSI is being released this week with .NET 4.x support.
-
Initial Import of C# .Net 2.0 Config GUI
-
Minor changes and add MSI setup. See CHANGES.txt for details.
-
Brian Clayton committed [006b64]
Added Visual Studio 2017 solution/project files. Organized directory structure and made file naming more consistent. Updated passwdhk-config to .NET 4.6.1.
-
kervin committed [a9bb8c]
Add VS 2008 project files.
-
No longer needed
-
Minor changes and add MSI setup. See CHANGES.txt for details.
-
Update: My Windows Sys Admin came back, and found a way to install .Net Framework 3.5, and now it works beautifully. Still might be nice to have an updated version sometime. Thanks again, for being awesome!
-
Window Server 2016 & .Net Framework 3.5
-
Added Visual Studio 2017 solution/project files. Organized directory structure and made file naming more consistent. Updated passwdhk-config to .NET 4.6.1.
-
Anonymous modified a comment on ticket #2
I am unable to use passwdhk on windows server 2008 x64 bits. I tried to use the 32bits...
-
SteveM created ticket #5
Ignore Computer Accounts
-
Anonymous modified a comment on ticket #2
I am unable to use passwdhk on windows server 2008 x64 bits. I tried to use the 32bits...
1
