Biologon in Vista?
Hello,
we develop the fingerprint security software. I would need to log the user on without his interaction with logon UI - the user simply places his finger on the sensor, our software retrieves his username and password and... and would call InitiateInteractiveLogon() from biologon.dll in Windows XP. But in Vista this doesn't seem to work. Does anybody know the solution?
Thank you in advance.
[428 byte] By [
wolf777] at [2008-2-13]
You will not be able to faciliate this. The SAS (
Secure Attention Sequence) Alt+Ctrl+Delete cannot be bypassed. I filled a bug on this in regards to SmartCards, they have in Windows XP the same behavior. The underlying issue is the ability to bypass the Alt+Ctrl+Delete Sequence is /was a security vulnerabilty and since they re-did Winlogon and are killing GINA support for Windows Vista (one of the reasons this won't get back ported to XP was app compat) they have removed this "vulnerability"
Sorry, not what you wanted to hear. We weren't excited about the change either, but it is hard to push back when they say it is security related change.
Josh
WindowsConnectedThank you very much, although this is really not the good news for us.
But anyways, assuming we can get over Ctrl+Alt+Delete (at worst, user has to press it) or we are in FUS mode with the welcome screen containing user tiles where no SAS is required - do you know some alternative to InitiateInteractiveLogon() in Vista?
So I finally learned that it is possible to initiate the autologon. Not even too difficult, as the interface supports it - look at ICredentialProvider::GetCredentialsCount() and ICredentialProviderCredential::SetSelected() (the later is not described in documentation, but can be found in the credentialprovider.h from some later build of Vista). It should also be possible to disable the Ctrl+Alt+Del message by altering the local security settings as described here:
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/572.mspx 