|
Overview |
|
|
|
Group |
|
|
|
Quick Info
Windows NT
| Yes
| Win95
| No
| Win32s
| No
| Import Library
| advapi32.lib
| Header File
| winbase.h
| Unicode
| WinNT
| Platform Notes
| None
|
|
|
LogonUser
The LogonUser function attempts to perform a user logon operation. You specify the user
with a user name and domain, and authenticate the user with a clear-text password.
If the function succeeds, you receive a handle to a token that represents the
logged-on user. You can then use this token handle to impersonate the specified
user, or in most cases, to create a process running in the context of the
specified user.
BOOL LogonUser(
LPTSTR lpszUsername,
| // string that specifies the user name
| LPTSTR lpszDomain,
| // string that specifies the domain or server
| LPTSTR lpszPassword,
| // string that specifies the password
| DWORD dwLogonType,
| // specifies the type of logon operation
| DWORD dwLogonProvider,
| // specifies the logon provider
| PHANDLE phToken
| // pointer to variable to receive token handle
| );
|
|
Parameters
lpszUsername
Pointer to a null-terminated string that specifies the user name. This is the
name of the user account to log on to.
lpszDomain
Pointer to a null-terminated string that specifies the domain or server to log
on to. If this parameter is ".", LogonUser searches only the local account database for the account specified in lpszUsername. If this parameter is NULL, LogonUser searches the local account database, and then searches trusted domain account
databases, until it finds the lpszUsername account or the search is exhausted without finding the account name.
lpszPassword
Pointer to a null-terminated string that specifies the clear-text password for
the user account specified by lpszUsername.
dwLogonType
Specifies the type of logon operation to perform. The following logon types
are defined:
Value
| Meaning
| LOGON32_LOGON_BATCH
| This logon type is intended for batch servers, where processes may be
executing on behalf of a user without their direct intervention; or for higher
performance servers that process many clear-text authentication attempts at a time,
such as mail or web servers. LogonUser does not cache credentials for this logon type.
| LOGON32_LOGON_INTERACTIVE
| This logon type is intended for users who will be interactively using the
machine, such as a user being logged on by a terminal server, remote shell, or
similar process. This logon type has the additional expense of caching logon
information for disconnected operation, and is therefore inappropriate for some
client/server applications, such as a mail server.
| LOGON32_LOGON_SERVICE
| Indicates a service-type logon. The account provided must have the service
privilege enabled.
| LOGON32_LOGON_NETWORK
| This logon type is intended for high performance servers to authenticate clear
text passwords. LogonUser does not cache credentials for this logon type. This is the fastest logon
path, but there are two limitations.
First, the function returns an impersonation token, not a primary token. You
cannot use this token directly in the CreateProcessAsUser function. However, you can call the DuplicateTokenEx function to convert the token to a primary token, and then use it in CreateProcessAsUser.
Second, if you convert the token to a primary token and use it in CreateProcessAsUser to start a process, the new process will not be able to access other network
resources, such as remote servers or printers, through the redirector.
|
dwLogonProvider
Specifies the logon provider. The following logon providers are defined:
Value
| Meaning
| LOGON32_PROVIDER_DEFAULT
| Use the standard logon provider. This is the recommended value for dwLogonProvider. It gives an application the maximum upward compatibility with future
releases of Windows NT.
|
phToken
Pointer to a HANDLE variable that receives a handle to a token that represents the specified
user.
You can use the returned handle in calls to the ImpersonateLoggedOnUser function.
In most cases, the returned handle is a primary token that you can use in
calls to the CreateProcessAsUser function. However, if you specify the LOGON32_LOGON_NETWORK flag, LogonUser returns an impersonation token that you cannot use in CreateProcessAsUser unless you call DuplicateTokenEx to convert it to a primary token.
When you no longer need this handle, close it by calling the CloseHandle function.
Return Values
If the function succeeds, the return value is nonzero.
If the function fails, the return value is zero. To get extended error
information, call GetLastError.
Remarks
The process that calls LogonUser must have the SE_TCB_NAME privilege. The privilege does not need to be
enabled. The LogonUser function enables the privilege as necessary. The function fails if the
calling process does not have the SE_TCB_NAME privilege, and GetLastError returns the error code ERROR_PRIVILEGE_NOT_HELD. For more information about
privileges, see Privileges.
A user is considered logged on as long as at least one token exists. If you
call CreateProcessAsUser and then close the token, the system considers the user as still logged on
until the process (and all child processes) have ended.
If the LogonUser call is successful, the system notifies network providers that the logon
occurred by calling the provider's NPLogonNotify entry-point.
See Also
CreateProcessAsUser, ImpersonateLoggedOnUser
Programming books recommended by Amazon.com
More programming books on Amazon.com
|
Share this page
|
|
Follow us
|
| Last news from Greatis Software |
 |
|
Nostalgia .Net |
|
.Net is powerful, but not all-powerful, so sometimes we need to use Win32 API for our .Net applications. It's simple enough with Platform Invoke if you have Win32 skill, but we do not always have time to dig the ancient documentation, declare the special types that are compatible with Win32, find the values of the Win32's constants and so on. Nostalgia .Net offers several simple-to-use classes, and components that will allow you to forget about the headache of Win32 and just use the power of Win32 in your application the same way as you use the native. Net classes. More » |
| Recommended software for developers |
 |
|
Ultimate Pack |
|
Component pack for Delphi and C++ Builder that contains runtime form designer, runtime object inspector, print suite and much more for the very special price. More » |
 |
|
Form Designer .Net |
|
Unique runtime form design solution that allows to edit any form in .Net WinForms application at runtime with full source codes for only 300 euro! More » |
 |
|
Print Suite .Net |
|
Print Suite .Net is a set of components for easy printing texts, images and grids from your WinForms applications. Full C# source codes are available More » |
 |
|
Gradient Controls .Net |
|
Gradient Controls .Net offers controls with gradient background feature. Labels, panels and so on... Full C# source codes are available More » |
 |
|
Greatis iGrid |
|
iGrid plots drawing grid right over your desktop, so you can use it everywhere, with any drawing application without any special plugins for different graphic editors. More » |
All the contacts and projectsDmitry Vasiliev (just.dmitry)
Related LinksSoftware for Visual Studio .NET developers
Software for Delphi and C++ Builder developers
Software for Visual Basic 6 developers
Delphi Tips&Tricks
MegaDetailed.NET More Online Helps Win32 Programmer's Reference
Win32 Multimedia Programmer's Reference
OLE Programmer's Reference
Microsoft Windows Pen API Programmer's Reference
Microsoft Windows Sockets 2 Reference
Microsoft Windows Telephony API (TAPI) Programmer's Reference
Unix Manual Pages
|
