Credential Provider - how to skip SAS?

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP



Credential Provider - how to skip SAS?



I implemented my own custom Windows credential provider following the Windows SDK example which should let a remote application connect to a server and perform logon automatically.



The problem is: the SetUsageScenario event is not called until a user presses the SAS combination (Ctrl+Alt+Del), therefore my credential provider isn't able to automatically perform the login until that happens.


SetUsageScenario



How does RDP do the login automatically without me pressing Ctrl+Alt+Del and logging in automatically? How do I do the same with my custom credential provider?




1 Answer
1



SAS can be skipped for Console session only if You turn it off manually in the registry/policies.



RDP session always skip SAS and direct You to enter credentials.



Moreover modern RDP client asks for credentials prior to establishing connection to remote server. It serialize your credentials and send them to remote server. On server authentication is done using this serialized data.





so it's probably undocumented how to skip it without some dirty hacks (e.g. sendsas)
– Dean
Aug 13 at 13:30





In Windows XP / 2003 Gina was responsible for issuing SAS other that Ctrl-Alt-Del and initiate logon process. In Credential Providers schema I don't know legal way to eliminate SAS.
– Alexander
Aug 13 at 13:43



Ctrl-Alt-Del





No worries, you've been very helpful. Thanks!
– Dean
Aug 13 at 14:03






By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Popular posts from this blog

Firebase Auth - with Email and Password - Check user already registered

Dynamically update html content plain JS

How to determine optimal route across keyboard