Verifying user's password
During my install I prompt the user for their username and password. I then try to verify this, but it requires elevated priviledges. The documentation says to add the msidbCustomActionTypeNoImpersonate flag to custom actions, but this flag only works on deferred actions.
Does anyone know of another way that I can verify the users password?
Thanks,
Anthony
Would the NetworkService account meet your requirements? (NetworkService authenticates on the network as the computer account.)
Several issues come to mind with using the interactive user's account in the service context:
- Having to update the service config when the user's password changes (again requiring elevated permissions)
- Having the service authenticate as the "wrong user" if another user logs on to the computer (service will continue to run as the original user)
- Having to grant the user account the LogOnAsAService right.
- Storing the user's domain password in the LSA Secrets.