Server 2008 and custom password filters?

Answered Server 2008 and custom password filters?

  • Tuesday, September 15, 2009 7:29 PM
     
     
    We are preparing to migrate to Windows Server 2008 for our domain. In our Windows 2003 domain, we have a custom password filter and it works properly. When I try to use the same DLL in our Windows 2008 test environment, it does not work. Per http://msdn.microsoft.com/en-us/library/ms721766(VS.85).aspx I have copied the DLL to the Windows (and System32) directory and added the registry key. 

    Is there a different procedure for Windows Server 2008? Is the use of custom filters even supported in Windows Server 2008 (I haven't found a definitive answer).

    Thanks in advance.

All Replies

  • Wednesday, September 16, 2009 6:56 AM
    Moderator
     
     Answered

    Hi Chris

    Based on my research, the password filter function and architecture in Windows Server 2008 is the same as that in Windows Server 2003. The interface of password filter DLL is NOT changed.

     

    The problem may occur because some system changes in Windows Server 2008. For example, if the previous password filter is a 32-bit DLL but your Windows Server 2008 server is a 64-bit operating system, the 32-bit DLL will not be loaded. You will need to use a 64-bits DLL file or a 32-bits Windows Server 2008 server. We also handled some previous problems in which the custom password filter developed for Windows Server 2003 does not work for Windows Server 2008. In those cases, the DLL application depended on some functions which were changed in Windows Server 2008. However, to locate the exact issue, we will need to debug the password filter DLL that has problems. To do so, please contact the Microsoft Customer Service:

     

    For a complete list of Microsoft Product Support Services phone numbers and information about support costs, please go to the following address on the World Wide Web:

    http://support.microsoft.com/directory/overview.asp

    Best Regards,
    Wilson Jia


    This posting is provided "AS IS" with no warranties, and confers no rights.
  • Wednesday, September 16, 2009 10:42 AM
     
     Answered
    yes, I can also confirm this, my own custom password filter compiled x32 and tested on 2003 also runs without problems on 2008 x32. The problem is, that the x64 operating systems need x64 .DLL files and cannot run your x32 binaries. So if you have only x32 version of the password filter .DLL, it will not run on x64 system. No error is logged anywhere, but the .DLL is just not loaded into the LSASS process.

    ondrej.
  • Saturday, February 09, 2013 8:19 AM
     
     

    HI Ondrej Sevecek,

    Can you please pass a sample code or any link, idea related to creating custom password filter that runs on Windows server 2003 and 2008 including all service pack.

    Thanks in advance

    Regards

    Ashish


  • Wednesday, March 20, 2013 11:56 PM
     
     
    Please let me know if anyone has any success with password filter on 2008 R2 domain. We are testing for last two days but no success.
  • Thursday, March 21, 2013 4:06 AM
     
     

    HI Atul Pala,

    Have you installed visual c++ redistributable package (if you are using VS 2008 to develop custom password filter) in your  2008 R2 domain.

    This package is required to load your custom passwordFilter dll.

    Please let me know if it not work.

    Which version of Visual studio you are using?

    Can you tell me the process how you are doing, that can help me to figure out the problem.

    Regards

    Ashish