Aquileo | Activity for Password Filter DLL

Aquileo | snowdvl posted a comment on ticket #5

Mon, 19 Sep 2022 21:30:11 -0000

Hi Soisik Could it be that you had the option SkipComp enabled? Because I think there is a bug in the util.cpp file. I'm no C++ expert. But at line 216 and 217 you will find the following statement. // Get mutex - unfortunately, this whole section must be mutually exclusive so that the log doesn't get garbled by overlapping writes from multiple threads // ** Must be released before return! However in the skipcomp if block (line 228 - 237) PSHK_SUCCESS got returned without closing the log and releasing...

Aquileo | soisik posted a comment on ticket #5

Tue, 28 Sep 2021 14:58:15 -0000

Actually, it didn't work: after a few hours, password change processes hanged again. It seems the loglevel is just delaying the freeze of the DLL...

Aquileo | Ragnarok posted a comment on ticket #5

Tue, 28 Sep 2021 12:46:51 -0000

thanks, i will try your workaround

Aquileo | soisik posted a comment on ticket #5

Tue, 28 Sep 2021 12:28:21 -0000

We've experimented the same problem in WinSRV2016: the first password change is immediate but subsequent changes hangs for several minutes and sometime indefinitely, forcing a reboot. We have found that it only happen when logLevel is 0 or 1; Setting logLevel at 2 or 3, the execution of the script do not hang anymore.

Aquileo | Laurent FRANCFORT posted a comment on ticket #5

Mon, 13 Jan 2020 13:55:59 -0000

I did several tests at different customer sites, and it seems that the password filter works well with Windows Server 2008 R2 and Windows Server 2019, but has issues with WinSRV2012 and WinSRV2016. When installed on a WinSRV2012R2/2016 box, LSASS hangs when it receives a password change request (new user, change password through ADU&C or CTRL-ALT-DEL...) I didn't understand why LSASS freeze.

Aquileo | Laurent FRANCFORT posted a comment on a wiki page

Mon, 13 Jan 2020 09:13:39 -0000

Hi, do you know if password filter is compatible with Azure Active Directory self service Password Reset (SSPR) feature ? Details are provided here : https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks To be compatible, the password filter needs to be configured to apply in the admin password reset scenario.

Aquileo | Sébastien GENESTA created ticket #4

Fri, 04 Oct 2019 16:04:09 -0000

Windows server 2016 - DLL not loaded

Aquileo | david posted a comment on ticket #6

Tue, 03 Sep 2019 07:22:00 -0000

I continue trying to make run the passwdhk. I found that the problem is that the DLL is not correctly loaded. I have the 16953 error. I tryed too in and WinServer 2019 completly actualize and had the same error.

Aquileo | david created ticket #6

Mon, 02 Sep 2019 13:03:50 -0000

Passwdhk in server 2016

Aquileo | Ragnarok modified a comment on ticket #5

Fri, 30 Aug 2019 20:42:48 -0000

I have same issue on 2012R2 with only 1 server acting as DC. Also, after few hours the i cannot join pc's to domain or adduser, change password, etc... It's hang and i need to restat the server to work again :( event log do not show anything related.. any idea?

Aquileo | Ragnarok posted a comment on ticket #5

Fri, 30 Aug 2019 17:08:42 -0000

I have same issue on 2012R2 only 1 server ad DC after few hours the i can join pc's to domain or adduser, etc... It's hang and i need to restat the server to work again :( event log do not show anythin related.. any idea?

Aquileo | Laurent FRANCFORT posted a comment on ticket #5

Tue, 25 Jun 2019 13:08:00 -0000

Hi, I did the following : Add a Windows Server 2012 R2 as DC to the same domain Install password filter on this WinSrv2012 server Execute a lot of password modifications on this specific server. Everything ran fine. So it seems the issue is not with AD, but with the DC OS.

Aquileo | Laurent FRANCFORT created ticket #5

Mon, 20 May 2019 07:56:42 -0000

Password change/set hang after a few hours

Aquileo | Igor chistruga posted a comment on ticket #4

Wed, 19 Dec 2018 08:59:00 -0000

Hi, I've installed the latest Visual C++ 2017 Redistributable package which solved the issue. Thank you.

Aquileo | Igor chistruga created ticket #4

Tue, 18 Dec 2018 12:32:06 -0000

Could not set Password Filter on Windows Server 2012 x64 DC

Aquileo | Curtis Robinson modified ticket #2

Sun, 26 Aug 2018 12:19:02 -0000

Window Server 2016 & .Net Framework 3.5

Aquileo | Curtis Robinson modified ticket #1

Wed, 01 Aug 2018 02:42:44 -0000

RE: Security

Aquileo | Curtis Robinson posted a comment on ticket #1

Wed, 01 Aug 2018 02:42:25 -0000

This software is only as secure as the server it is installed on. This DLL runs as SYSTEM user since it runs under the LSASS.exe process. Also, this DLL calls external programs on the server defined by the system admin, so these external programs need to be secured as well.

Aquileo | Curtis Robinson posted a comment on ticket #2

Wed, 01 Aug 2018 02:37:15 -0000

Version 1.2.0 includes the required VC++ runtime.

Aquileo | Curtis Robinson modified ticket #5

Wed, 01 Aug 2018 02:36:07 -0000

Ignore Computer Accounts

Aquileo | Curtis Robinson posted a comment on ticket #5

Wed, 01 Aug 2018 02:35:49 -0000

The feature is implemented in version 1.2.0

Aquileo | Curtis Robinson committed [5c2601]

Wed, 01 Aug 2018 02:34:23 -0000

Update Change Log

Aquileo | Password Filter DLL released /passwdhk/1.2/passwdhk-x64-1.2.0-setup.zip

Wed, 01 Aug 2018 02:33:02 -0000

Aquileo | Password Filter DLL released /passwdhk/1.2/passwdhk-x64.1.2.0-setup.zip

Wed, 01 Aug 2018 02:27:03 -0000

Aquileo | Curtis Robinson committed [f40c38]

Mon, 30 Jul 2018 03:58:49 -0000

Add two registry entries

Aquileo | Curtis Robinson committed [c3fe79]

Mon, 30 Jul 2018 03:58:49 -0000

Add new registry entries

Aquileo | Curtis Robinson committed [63cafc]

Mon, 30 Jul 2018 03:58:49 -0000

Revert "Add two registry entries"

Aquileo | Curtis Robinson committed [5dcfd5]

Mon, 30 Jul 2018 03:58:49 -0000

Revert "Revert "Add two registry entries""

Aquileo | Curtis Robinson committed [cf7cb9]

Mon, 30 Jul 2018 02:57:16 -0000

Update logging with new registry entries

Aquileo | Curtis Robinson committed [37f1ef]

Mon, 30 Jul 2018 02:57:16 -0000

Change target to match Server 2016 .NET version

Aquileo | Curtis Robinson committed [bdb3ed]

Mon, 30 Jul 2018 00:43:04 -0000

Add Skip Computer Accounts Feature

Aquileo | Curtis Robinson committed [9e2643]

Mon, 30 Jul 2018 00:43:04 -0000

Add Skip Computer Accounts Feature

Aquileo | Curtis Robinson committed [230c9e]