1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
|
/****************************** Module Header ******************************\
* Module Name: winlogon.h
*
* Copyright (c) 1991, Microsoft Corporation
*
* Main header file for winlogon
*
* History:
* 12-09-91 Davidc Created.
* 6-May-1992 SteveDav Added space for WINMM sound function
\***************************************************************************/
#ifndef RC_INVOKED
#include <nt.h>
#include <ntrtl.h>
#include <nturtl.h>
#include <ntlsa.h>
#include <ntmsv1_0.h>
#include <lmsname.h>
#endif
#include <windows.h>
#include <winbasep.h>
#include <winuserp.h>
#include <winsecp.h>
#include <mmsystem.h>
#include <winwlx.h>
#ifndef RC_INVOKED
//
// Exit Codes, that will show up the bugcheck:
//
#define EXIT_INITIALIZATION_ERROR 1024
#define EXIT_SECURITY_INIT_ERROR 1025
#define EXIT_GINA_ERROR 1026
#define EXIT_SYSTEM_PROCESS_ERROR 1027
#define EXIT_NO_SAS_ERROR 1028
#define EXIT_SHUTDOWN_FAILURE 1029
#define EXIT_GINA_INIT_ERROR 1030
//
// Tempoary development aid - system logon capability
//
#if DBG
#define SYSTEM_LOGON
#endif
#if DEVL
#define INIT_REGISTRY 1
#endif
//
// Temporary development aid - Ctrl-Tasklist starts cmd shell
//
#if DBG
#define CTRL_TASKLIST_SHELL
#endif
//
// Define the input timeout delay for logon dialogs (seconds)
//
#define LOGON_TIMEOUT 120
//
// Define the input timeout delay for the security options dialog (seconds)
//
#define OPTIONS_TIMEOUT 120
//
// Define the number of days warning we give the user before their password expires
//
#define PASSWORD_EXPIRY_WARNING_DAYS 14
//
// Define the maximum time we display the 'wait for user to be logged off'
// dialog. This dialog should be interrupted by the user being logged off.
// This timeout is a safety measure in case that doesn't happen because
// of some system error.
//
#define WAIT_FOR_USER_LOGOFF_DLG_TIMEOUT 120 // seconds
//
// Define the account lockout limits
//
// A delay of LOCKOUT_BAD_LOGON_DELAY seconds will be added to
// each failed logon if more than LOCKOUT_BAD_LOGON_COUNT failed logons
// have occurred in the last LOCKOUT_BAD_LOGON_PERIOD seconds.
//
#define LOCKOUT_BAD_LOGON_COUNT 5
#define LOCKOUT_BAD_LOGON_PERIOD 60 // seconds
#define LOCKOUT_BAD_LOGON_DELAY 30 // seconds
//
// Define the maximum length of strings we'll use in winlogon
//
#define MAX_STRING_LENGTH 255
#define MAX_STRING_BYTES (MAX_STRING_LENGTH + 1)
//
// Define the typical length of a string
// This is used as an initial allocation size for most string routines.
// If this is insufficient, the block is reallocated larger and
// the operation retried. i.e. Make this big enough for most strings
// to fit first time.
//
#define TYPICAL_STRING_LENGTH 60
//
// Windows object names
//
#define WINDOW_STATION_NAME TEXT("WinSta0")
#define APPLICATION_DESKTOP_NAME TEXT("Default")
#define WINLOGON_DESKTOP_NAME TEXT("Winlogon")
#define SCREENSAVER_DESKTOP_NAME TEXT("Screen-saver")
#define APPLICATION_DESKTOP_PATH TEXT("WinSta0\\Default")
#define WINLOGON_DESKTOP_PATH TEXT("WinSta0\\Winlogon")
#define SCREENSAVER_DESKTOP_PATH TEXT("WinSta0\\Screen-saver")
//
// Winlogon's registry location
//
#define WINLOGON_KEY L"SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon"
//
// Define the structure that contains information used when starting
// user processes.
// This structure should only be modified by SetUserProcessData()
//
typedef struct {
HANDLE UserToken; // NULL if no user logged on
PSID UserSid; // == WinlogonSid if no user logged on
PSECURITY_DESCRIPTOR NewProcessSD;
PSECURITY_DESCRIPTOR NewProcessTokenSD;
PSECURITY_DESCRIPTOR NewThreadSD;
PSECURITY_DESCRIPTOR NewThreadTokenSD;
QUOTA_LIMITS Quotas;
LPTSTR CurrentDirectory;
PVOID pEnvironment;
} USER_PROCESS_DATA;
typedef USER_PROCESS_DATA *PUSER_PROCESS_DATA;
//
// Define the structure that contains information about the user's profile.
// This is used in SetupUserEnvironment and ResetEnvironment (in usrenv.c)
// This data is only valid while a user is logged on.
//
typedef struct {
LPTSTR ProfilePath;
HANDLE hProfile;
LPTSTR PolicyPath;
LPTSTR NetworkDefaultUserProfile;
LPTSTR ServerName;
LPTSTR Environment;
} USER_PROFILE_INFO;
typedef USER_PROFILE_INFO *PUSER_PROFILE_INFO;
//
// Get any data types defined in module headers and used in GLOBALS
//
#define TYPES_ONLY
#include "ginamgr.h"
#undef TYPES_ONLY
typedef enum _WinstaState {
Winsta_PreLoad,
Winsta_Initialize,
Winsta_NoOne,
Winsta_NoOne_Display,
Winsta_NoOne_SAS,
Winsta_LoggedOnUser_StartShell,
Winsta_LoggedOnUser,
Winsta_LoggedOn_SAS,
Winsta_Locked,
Winsta_Locked_Display,
Winsta_Locked_SAS,
Winsta_WaitForLogoff,
Winsta_WaitForShutdown,
Winsta_Shutdown,
Winsta_InShutdownDlg,
Winsta_StateMax
} WinstaState;
#define IsSASState(State) ((State == Winsta_NoOne_SAS) || \
(State == Winsta_LoggedOn_SAS) || \
(State == Winsta_Locked_SAS) )
#define IsDisplayState(State) ((State == Winsta_NoOne_Display) || \
(State == Winsta_Locked_Display) || \
(State == Winsta_WaitForLogoff) )
#if DBG
extern char * StateNames[Winsta_StateMax];
#define GetState(x) ( x < (sizeof(StateNames) / sizeof(char *)) ? StateNames[x] : "Invalid")
#endif
extern BOOLEAN SasMessages;
#define DisableSasMessages() SasMessages = FALSE;
#define TestSasMessages() (SasMessages)
VOID
EnableSasMessages(HWND hWnd);
BOOL
QueueSasEvent(
DWORD dwSasType);
BOOL
FetchPendingSas(
PDWORD pSasType);
BOOL
TestPendingSas(VOID);
BOOL
KillMessageBox( DWORD SasCode );
typedef enum _ActiveDesktops {
Desktop_Winlogon,
Desktop_ScreenSaver,
Desktop_Application,
Desktop_Previous
} ActiveDesktops;
typedef struct _WinstaDescription {
HWINSTA hwinsta; // Handle to window station
HDESK hdeskWinlogon; // Desktop handles
HDESK hdeskApplication; // ""
HWND hwndAppDesktop; // "
HDESK hdeskScreenSaver; // "
HDESK hdeskPrevious; // Previous
ActiveDesktops ActiveDesktop; // Current, active desktop
ActiveDesktops PreviousDesktop; // Previous desktop
PWSTR pszWinsta; // Name of window station.
PWSTR pszDesktop; // Name of current desktop.
DWORD DesktopLength; // Length of name.
BOOL Locked; // Do I think it's locked?
PVOID Acl; // Stored ACL
} WinstaDescription, * PWinstaDescription;
typedef UINT (FAR WINAPI *SOUNDPROC)();
typedef BOOL (FAR WINAPI *MIDIPROC)();
//
// Define the winlogon global structure.
//
typedef struct {
DWORD CheckMark;
// Filled in by InitializeGlobals at startup
HANDLE hInstance;
PSID WinlogonSid;
SOUNDPROC PlaySound;
SOUNDPROC MigrateSoundEvents;
MIDIPROC MigrateMidiUser;
HANDLE hMPR; // handle to MPR.DLL
// Needed to call WNetRestoreConnection when logging
// on the user (in SetupUserEnviron), and to call
// WNetNukeConnections when logging of the user.
// Cannot be called directly beacuse it uses the
// winreg apis, and thus it has to be loaded
// after the profiles are loaded (SetupUserEnvironment).
// Has to be loaded in the user context.
HANDLE hEventLog;
// Filled in by InitializeSecurity() at startup
WinstaDescription WindowStation;
PGINASESSION pGina;
WinstaState WinlogonState;
WinstaState PreviousWinlogonState;
BOOL ForwardCAD;
DWORD SasType;
DWORD LastGinaRet;
DWORD LogoffFlags;
BOOL ScreenSaverActive;
BOOL ShutdownStarted;
// Filled in during startup
BOOL AuditLogFull;
BOOL AuditLogNearFull;
// Always valid, indicates if we have a user logged on
BOOL UserLoggedOn;
DWORD IniRef;
DWORD TickCount;
// Always valid - used to start new processes and screen-saver
USER_PROCESS_DATA UserProcessData;
LUID LogonId;
// Filled in during SetupUserEnvironment, and used in ResetEnvironment.
// Valid only when a user is logged on.
PWSTR LogonScripts;
PWSTR UserName;
PWSTR Domain;
USER_PROFILE_INFO UserProfile;
//
// Value of SetupType from registry
//
ULONG SetupType ;
//
// Boolean flag indicating whether SETUP is to be run
//
BOOL fExecuteSetup ;
WCHAR DesktopName[ TYPICAL_STRING_LENGTH ];
DWORD DesktopNameLength;
} GLOBALS;
typedef GLOBALS *PGLOBALS;
#define GLOBALS_CHECKMARK 0x616f6947
#define VerifyHandle(h) ((PGLOBALS) (((PGLOBALS)h)->CheckMark == GLOBALS_CHECKMARK) ? h : NULL)
//
// Global pointer to the pGlobals structure
//
extern PGLOBALS g_pGlobals;
extern HANDLE hFontThread;
extern BOOL ExitWindowsInProgress ;
//
// Define a macro to determine if we're a workstation or not
// This allows easy changes as new product types are added.
//
#define IsWorkstation(prodtype) (((prodtype) == NtProductWinNt) \
|| ((prodtype) == NtProductServer))
#define DLG_SUCCESS IDOK
#define DLG_FAILURE IDCANCEL
//
// Include individual module header files
//
#include "wlxutil.h"
#include "regini.h"
#include "logon.h"
#include "loggedon.h"
#include "sas.h"
#include "winutil.h"
#include "sysinit.h"
#include "ginamgr.h"
#include "debug.h"
#include "strings.h"
#include "wlxutil.h"
#include "doslog.h"
#include "regini.h"
#include "secutil.h"
#include "logoff.h"
#include "misc.h"
#include "msgalias.h"
#include "usrpro.h"
#include "usrenv.h"
#include "envvar.h"
#include "monitor.h"
#include "scrnsave.h"
#include "timeout.h"
#include "provider.h"
#include "removabl.h"
#ifdef _X86_
#include "os2ssmig.h"
#endif
#endif /* !RC_INVOKED */
//
// Include resource header files
//
#include "win31mig.h"
#include "wlevents.h"
#include "stringid.h"
#include "dialogs.h"
|