Windows File Protection and Custom GINA

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I have developed a custom GINA which enables login thro' smart card.

But it can be deleted or changed by booting in Safe Mode, which is not desirable since it is a security product.

My question is - Can I add my GINA dll among the files which are protected by the "Windows File Protection (WFP) feature" ? And if so, how will that be done ? As i understand, these protected files can only be replaced thro' Service Pack installations\ Updates\Hotfixes etc.

Is there any way so that I can get my GINA under the security blanket of the WFP ? :-) or any way to prevent deletion....??

any help....???!!

Richa Joshi
 
Files protected by "Windows File Protection" are easy to
delete as well. Just remove the "backup file" from the
dllcache first, then remove the original file.

There are ways to restrict "Safe Mode" but that is easily
bypassed as well with the proper boot disk or access to
the registry.

If you can physically secure the machine and limit user
file and registry access, then you can disable "Safe Mode"
by editing the following registry key:
(Not recommended/strongly discouraged by Microsoft!)
USE AT YOUR OWN RISK!

Click [Start]
Run
Type Regedit.exe
Click [OK]
HKLM\System\CurrentControlSet\Control\SafeBoot
Under SafeBoot, you should see Minimal and Network
Rename them to "Minimal-" and "Network-"
This will cause Windows to crash the next time it is
booted into Safe Mode.


Austin M. Horst
 
Back
Top