HOWTO: Programmatically Change Network Password Under Windows 95

• Microsoft Win32 Application Programming Interface (API) included with: - Microsoft Windows 95

SUMMARY

If you want to design your application to implement its own routine to change domain passwords on Windows 95, you have several methods available to you, each one of which has limitations on functionality, portability, or security. This article describes two of these methods in detail.

MORE INFORMATION

Method 1

Dynamically load the 32-bit API PwdChangePassword() from Mpr.dll and it will successfully change passwords. However, it will display a non- customizable dialog box to prompt the user for password information. If you want your application to have its own interface for changing passwords, you cannot use this API.

NOTE: PwdChangePassword() is the only interface that will change the Windows password as well as your network password.

The following sample code demonstrates how to use PwdChangePassword.

Sample Code

   ////////////////////////////////////
   #include <windows.h>
   #include <stdio.h>
   #include "pwdspi.h"// Found in July 96 DDK otherwise define as follows

   #ifndef PS_SYNCMASTERPWD //if pwdspi.h is not present
   #define PS_SYNCMASTERPWD         0x03
   #define PS_SYNCMASTERPWD_OFF     0x00
   #define PS_SYNCMASTERPWD_ON      0x01

   // Function definition of PwdChangePassword and helper struct for
   // Windows 95. Helper structure (also found in pwdspi.h)
   typedef struct _CHANGEPWDINFO{
      LPTSTR lpUsername;
      LPTSTR lpPassword;
      DWORD cbPassword;
   } CHANGEPWDINFO, FAR *LPCHANGEPWDINFO;
   #endif

   // Function definitions:
   typedef DWORD
    (APIENTRY *LPPwdChangePassword)(LPCTSTR,HWND,DWORD,LPCHANGEPWDINFO);
   typedef DWORD (APIENTRY *LPPwdSetPasswordStatus)(LPCSTR,DWORD,DWORD);

   // Function to display error messages upon API failure
   void DisplayError(char *pszAPI);

   void main()
   {
   CHANGEPWDINFO   s = {NULL,NULL,0}; // initialize struct to empty.
   LPPwdChangePassword sPwdChangePassword;
   LPPwdSetPasswordStatus sPwdSetPasswordStatus;
   DWORD   res = 0;
   DWORD   cbUserName = 250;
   HINSTANCE   lib = LoadLibrary("MPR.DLL");

   if (lib == NULL)
        DisplayError("LoadLibrary");

   // To synchronize network provider password with windows password we
   // need to call PwdSetPasswordStatus. By synchronizing the network
   // provider password we avoid having to change each password separately.
   // Network providers listed in registry at:
   // HKLM/System\CurrentControlSet\Control\PwdProvider

   // Get address of PwdGetPasswordStatus
   sPwdSetPasswordStatus =
      (LPPwdSetPasswordStatus) GetProcAddress(lib,"PwdSetPasswordStatusA");
   if (sPwdSetPasswordStatus == NULL)
      DisplayError("GetProcAddress");

   res = sPwdSetPasswordStatus("MSNP32", // name of password provider
                               PS_SYNCMASTERPWD,
                               PS_SYNCMASTERPWD_ON
                               );
   if (res != WN_SUCCESS)
        DisplayError("PwdSetPasswordStatus");

   // Must get PwdChangePasswordA because in Windows 95 we are using the
   // ascii version of the exported function
   sPwdChangePassword =
      (LPPwdChangePassword) GetProcAddress(lib,"PwdChangePasswordA");

   // Call sPwdChangePassword specifying NULL as network provider.
   // This causes windows (non-network) password to be changed and hence
   // all synchronized passwords.
   res = sPwdChangePassword(    NULL, // Network provider
                                GetDesktopWindow(), //Window to own dialog
                                0,  // No special flag
                                &s  // Address of CHANGEPWDINFO structure
                                );
   if (res != WN_SUCCESS)
        DisplayError("PwdChangePassword");

   FreeLibrary(lib);
   printf("Password = %s\n",s.lpPassword);

   return;
   }

   void DisplayError(char *pszAPI)
   {
   LPVOID lpvMessageBuffer;

   FormatMessage(FORMAT_MESSAGE_ALLOCATE_BUFFER|FORMAT_MESSAGE_FROM_SYSTEM,
                 NULL, GetLastError(),
                 MAKELANGID(LANG_NEUTRAL, SUBLANG_DEFAULT),
                 (LPTSTR)&lpvMessageBuffer, 0, NULL);

   //... now display this string
   printf("ERROR: API        = %s.\n", pszAPI);
   printf("       error code = %d.\n", GetLastError());
   printf("       message    = %s.\n", (char *)lpvMessageBuffer);

   // Free the buffer allocated by the system
   LocalFree(lpvMessageBuffer);
   ExitProcess(GetLastError());
   }

Method 2

A relatively easy way to change passwords under Windows 95 is to have a server process running on a Windows NT server that creates a named pipe to which the Windows 95 client can connect. The Windows NT Server calls the ImpersonateNamedPipeClient() API and get the Windows 95 user's domain name and user name as described in the following knowledge base article:

   ARTICLE-ID: Q155698
   TITLE     : HOWTO: Look Up Current User Name and Domain Name

NOTE: You should not use the 16-bit Lan Manager API NetUserChangePassword(). This API changes the password to all uppercase characters and then sends the username and password combination across the network in non-encrypted clear text form. This is not only a security risk, it may also invalidate the original password by modifying changing it to an all uppercase version that may no longer be valid if the server applies password filtering.