🚀 go-pugleaf

Hi all, just wondering if anyone had come across this situation before, and
had resolved it.  I have a hardware token-based authentication system
developed for processing logon's to Windows.  The tokens hold an encrypted
block of data that represents the user's Username, Password and Domain.

Now the tokens need to be programmed up so at some point the user needs to
input there details, which the application will then encrypt and write to
the token.  However I need to ensure that the values they enter actually
match there username, password and domain.  I therefore need to validate the
information that they enter.

I don't know if this is possible, it would seem to be a bit of a security
flaw to be able test for valid values during an open session of Windows.
However I have seem this sort of thing within Scheduler.  It prompts you to
enter the Admin username and password, which I assume it validates and then
holds in order to run the particular scheduled task in the context of the
Admin.

Any help would be excellent (code examples would be spot on :-)

Thanks in advance,

Mike Collins