Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion GroupsWindows VistaWindows XPWindows MeWindows 98Windows 95Virtual PCInternet ExplorerOutlook ExpressWindows MediaSecurity
Related Topics
MS Server ProductsMS OfficePC HardwareMore Topics ...

Windows Forum / Windows XP / Security and Administration / April 2005

Tip: Looking for answers? Try searching our database.

How to change "Invalid Login Messages"

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
fjalbuena - 29 Apr 2005 04:38 GMT
Hi,

Can anyone tell me how, if it is possilbe, to change the message displayed
to the user when he logs in incorrectly?  For example,  when a user enters
the wrong password he gets the message: "The Password is Incorrect.  Type the
Pas..... ".
I want to change this message to only display something like "Invalid Logon
Attempt".  So that the user, who might be a hacker trying to break into an
account, will not know if he got only the user-id wrong or the password wrong
or both.

Thanks for any help regarding this.  I think its a security issue when the
operating system gives hints that the username is correct and only the
password is wrong.

Thanks again.
Colin Nash [MVP] - 29 Apr 2005 05:14 GMT
> Hi,
>
[quoted text clipped - 15 lines]
>
> Thanks again.

Hmm on my PC (XP Pro) it gives the exact same error message "The system
could not log you on.  Verify that the user name and password are
correct..." for incorrect usernames and incorrect passwords.

Basically the message tells you that you were not authenticated and doesn't
tell you the reason.   In other words, it does exactly what you want.

You're using XP Pro?  Maybe Home Edition gives more details (emphasis more
on home user ease-of-use than security) but I've never noticed that.

Signature

Colin Nash
Microsoft MVP
Windows Shell/User

 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.