Sunday, December 22, 2024 8:10:02 PM

Secure Lockdown - Change Password Programatically

9 years ago
#2520 Quote
I am desperate to find a way of changing the Secure Lockdown password via a batch file or small .exe file. I thought I would be able to do this by exporting the settings, editing the resultant .bac file and importing it back into Secure Lockdown. However, the password contained within the text file is encrypted. I am wishing to do this so that I can change the password at will when our end user gains access to it. Please tell me there's a way of achieving this
0
9 years ago
#2521 Quote
As you mentioned you can do this using the settings Export / Import feature of Secure Lockdown. There is a command line option you can run to import Secure Lockdown settings. You will need to first set the new password on any Secure Lockdown system via the software, then export its settings. Then, you can use the settings file generated to update any other system using the command line. If you only want to update the password setting, you'll need to modify the exported settings file to include only the password setting. You can do that with a text editor such as Notepad (just strip out all other settings from the file and leave the encrypted password setting). Command line usage instructions are provided in the Secure Lockdown - Administrator Guide.
0
9 years ago
#2522 Quote
Sorry, but I think you have misunderstood my question. I am not looking to export settings to import them onto other systems, I am wanting to change the password on a single system without having to open up the Secure Lockdown Window. If the .bac file contained an unencrypted password string, I could easily achieve this but without knowing the encryption method I am unable to. To reiterate, at times we must provide our end users with the Secure Lockdown passowrd but after doing so  we are needing to change the password to prevent unauthorised access to Windows
0
9 years ago
#2523 Quote
You would not need to open the Secure Lockdown application on the system that needs the password change. You would only need to run the command line on it. However, to supply the command line with the new password information, you need to generate a settings file on a different computer that has Secure Lockdown on it.
0
9 years ago
#2524 Quote
Thankyou but I guess what I want to do isn't possible. To import settings into a system overseas, we would need to send the .bac file to them however, we are wishing to change the password discretely. For other purposes, our software periodically generates a random code which is provided to us when system critical parameters need changing. We perform an algorithm based on this random code to create a password. This password is then provided to the customer allowing them access. In an ideal world, each time we generate a new random code, I wanted to amend the .bac file to incorporate the subsequent password. However, to do this I would need to know how to encrypt it in the same way that you currently do.
0
9 years ago
#2526 Quote
Yes, for this process to be effective, you do need to have remote access software running on the system. Many of our customers use remote access applications such as LogMeIn, BigFix, and TeamVeiwer and run scripts on multiple computers at once.

Also, if you want to substitute plain text (un-encrypted) passwords in the .bac file, that will work too. Or, you could skip the export/import process and modify the Inteset > Secure Lockdown Password Windows Registry setting directly (with a plain text password).
0
9 years ago
#2530 Quote
OK, I am almost there but have one problem remaining, to import settings into Secure Lockdown requires a logoff or a restart. As i am am wanting to change the password every time I launch my application, I would become stuck in a loop of importing the .bac file, logging off, importing the .bac file etc etc. Is there anyway at all that I can avoid having to logoff/restart but still modify the password with this new password being active with immediate effect?
0
9 years ago
#2531 Quote
You could use Windows Regedit command line to change the individual setting without needing a reboot. Note that this will work for the password setting, but not for most other Secure Lockdown settings.
0
9 years ago
#2532 Quote
Perfect!!! Works great! Thanks for your help
0
9 years ago
#2535 Quote
I have got this working whilst secure lockdown is disabled but seem to be having problems when it is enabled. Can you please confirm that I can edit the password by writing to regedit whilst secure lockdown is enabled.
0