RunAs always succeeds even with wrong password

[NickYoung]

Im trying to use some code that lets me check if an entered windows password is correct, the code uses RunAs to check if a run was successful (So i know i have the right password) but for some reason even with a simple script no matter what i enter it always succeeds

RunAs(@UserName,@LogonDomain,"stuff",2,"cmd /c","",@SW_HIDE))
RunAs(@UserName,@LogonDomain,"",2,"cmd /c","",@SW_HIDE))

Im on WIndows 7 64-bit and i have been mulling over this for days, i must be missing something simple. Searching the forum and google gave me the same examples i had already used to no luck.

Edited January 30, 2014 by NickYoung

[Melba23]

NickYoung,

lets me check if an entered windows password is correct

and why do you need to do that?

M23

[NickYoung]

Look in the help file for the differences of Run vs RunWait.

Run doesn't return success of the script, it returns the PID of a created process.  You are creating a process, so you think it's a 'success'.

 

I understand that, but with RunAs its not suppose to create the proccess at all but instead return 0 if it could not (Such as if the password is wrong)

I dont care about the return of the proccess just if it can be created or not, when i give it the wrong password it should not create it, return 0, and set error, but it does.

[NickYoung]

NickYoung,

and why do you need to do that?

M23

 

I work remotely with alot of PCs and need to setup the systems for autologon so that i dont need to call the end user everytime  reboot and it hits the password prompt, by checking if the user has a password i can skip asking them, if they do i need to make sure they give the right one or i still cant login.

[BrewManNH]

Don't use option 2 with RunAs, it appears to be loading your network credentials that way. Use option 0 "Interactive logon with no profile".

[NickYoung]

Don't use option 2 with RunAs, it appears to be loading your network credentials that way. Use option 0 "Interactive logon with no profile".

 

Wont handle a blank password, i wonder why

 

EDIT: Solved

Newer versions of windows prevent you from using blank passwords for some things, so i saved the values of some reg keys, changed them, then set them back when i was done

Func getPass()
   
   local $CS1PasswordPol = RegRead("HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa", "LimitBlankPasswordUse")
   local $CCSPasswordPol = RegRead("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa", "LimitBlankPasswordUse")
   
   RegWrite("HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa", "LimitBlankPasswordUse", "REG_DWORD", 0)
   RegWrite("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa", "LimitBlankPasswordUse", "REG_DWORD", 0)
   $pass = ""
   while RunAs(@UserName,@LogonDomain,$pass,0,"cmd /c","",@SW_HIDE) = 0
      $pass = InputBox("Password Required", "Your account appears to have a password, for our technicians to log back in automaticly to continue service we need access to it. You can simply enter '!!!' to skip but the tech will need you to login after every reboot.", "", "*")
      if $pass = '!!!' Then
         $pass = '[SKIPPED]'
         ExitLoop
      EndIf
      
      
   WEnd
   
   RegWrite("HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa", "LimitBlankPasswordUse", "REG_DWORD", $CS1PasswordPol)
   RegWrite("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa", "LimitBlankPasswordUse", "REG_DWORD", $CCSPasswordPol)
   
   return $pass
   
EndFunc

Thanks everyone, eveything seems to be working now, thought i would post the full working function incase anyone wants the big picture of how i did it.

Edited January 30, 2014 by NickYoung