UserMgr plug-in - Revision history

Kanelo2: added new File, ValidatePassword, GrouID lookup if in []

2021-07-23T15:18:44Z

added new File, ValidatePassword, GrouID lookup if in []

â† Older revision		Revision as of 15:18, 23 July 2021
Line 3:		Line 3:
	== Links ==		== Links ==
	<attach>UserMgr.zip</attach>		<attach>UserMgr.zip</attach>
			<attach>UserMgr (2021).zip</attach>

	Find the original plugin of the author (15.8.2006) at http://www.meinberg.de/download/utils/UserMgr.zip		Find the original plugin of the author (15.8.2006) at http://www.meinberg.de/download/utils/UserMgr.zip
Line 172:		Line 173:
	</highlight-nsis>		</highlight-nsis>
	: grants full access for "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Blabla" to user "myuser"		: grants full access for "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Blabla" to user "myuser"

			; UserMgr<nowiki>::</nowiki>ValidatePassword "PASSWORD" "DOMAIN"
			: checks if a password complies with GPO requirements
			: check against current machine DOMAIN = local
			: NERR_PasswordTooShort (2245) will sometimes be thrown if the password matches or contains the username. This can not be checked beforehand with this function as there is no username given.



			GROUPID may be a (localized) group name or a group SID in []
			: default [https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/security-identifiers Security identifiers]

	==== Return value ====		==== Return value ====

Line 205:		Line 216:

	UserMgr::AddToGroup "myuser" "Administrators"		UserMgr::AddToGroup "myuser" "Administrators"
			Pop $0
			MessageBox MB_OK "AddToGroup Result : $0"

			UserMgr::AddToGroup "myuser" "[S-1-5-32-544]"
	Pop $0		Pop $0
	MessageBox MB_OK "AddToGroup Result : $0"		MessageBox MB_OK "AddToGroup Result : $0"
Line 247:		Line 262:
	Pop $0		Pop $0
	MessageBox MB_OK "ChangeUserPassword Result : $0"		MessageBox MB_OK "ChangeUserPassword Result : $0"

			UserMgr::ValidatePassword "mypassword" "local"
			Pop $0
			MessageBox MB_OK "ValidatePassword Result : $0"

	UserMgr::SetUserInfo "myuserA" "PASSWORD" "mypasswordc"		UserMgr::SetUserInfo "myuserA" "PASSWORD" "mypasswordc"
Line 312:		Line 331:

	== Changes ==		== Changes ==

			KFF 29 Mai 2021:
			* Resolves groupid to groupname. If enclosed in square brackets a string SID is assuemd and a Lookup is performed
			* NetLocalGroupDelMembers used instead of NetGroupDelUser in the RemoveFromGroup function to make it work
			* The function ValidatePassword is added to be able to check a password beforehand agains GPO requirements

	JPR 01 Jan 2008:		JPR 01 Jan 2008:

Sonyisda1: Corrected MSDN url links for errors

2017-09-13T13:06:21Z

Corrected MSDN url links for errors

â† Older revision		Revision as of 13:06, 13 September 2017
Line 181:		Line 181:

	; "ERROR xxxx"		; "ERROR xxxx"
	: An error occurred. Please see [~~http~~://msdn.microsoft.com~~/library/default.asp?url=/library~~/en-us/~~netmgmt~~/~~netmgmt~~/~~network_management_error_codes~~.~~asp~~ MSDN] or the LMERR.H file (comes with Visual Studio) to find out about possible error codes. You may also find the [~~http~~://msdn.microsoft.com~~/library/default.asp?url=/library~~/en-us/~~netmgmt~~/~~netmgmt~~/~~network_management~~.~~asp~~ Network Management] page on MSDN to be useful.		: An error occurred. Please see [https://msdn.microsoft.com/en-us/library/windows/desktop/aa370674(v=vs.85).aspx MSDN] or the LMERR.H file (comes with Visual Studio) to find out about possible error codes. You may also find the [https://msdn.microsoft.com/en-us/library/windows/desktop/aa370672(v=vs.85).aspx Network Management] page on MSDN to be useful.

	== Example ==		== Example ==

Bugmenot: /* Changes */ wiki interlink

2017-06-13T16:31:06Z

Changes: wiki interlink

â† Older revision		Revision as of 16:31, 13 June 2017
Line 315:		Line 315:
	JPR 01 Jan 2008:		JPR 01 Jan 2008:

	* NetLocalGroupAddMembers used instead of NetGroupAddUser in the AddToGroup function to make it work. (Thanks to the article of CancerFace (~~http://nsis.sourceforge.net/User_Management_using_API_calls~~))		* NetLocalGroupAddMembers used instead of NetGroupAddUser in the AddToGroup function to make it work. (Thanks to the article of CancerFace ([[User Management using API calls]]))
	* PASSWORD added as possible FIELD for the SetUserInfo function. With this field the user password can be changed		* PASSWORD added as possible FIELD for the SetUserInfo function. With this field the user password can be changed
	* The function ChangeUserPassword is added to be able to change a user password		* The function ChangeUserPassword is added to be able to change a user password

Anders: Added NT4 issue

2017-06-02T14:49:24Z

Added NT4 issue

â† Older revision		Revision as of 14:49, 2 June 2017
Line 28:		Line 28:
	: Untested on Windows 9x; structure is different, so probably not going to work.		: Untested on Windows 9x; structure is different, so probably not going to work.

	: Any help in resolving these issues ([http://forums.winamp.com/member.php?&action=getinfo&userid=165633 submitting a patch], etc) is appreciated.		; Windows NT4 support
			: Plug-in does not work because ConvertSidToStringSid and ConvertStringSidToSid are unavailable!

			Any help in resolving these issues ([http://forums.winamp.com/member.php?&action=getinfo&userid=165633 submitting a patch], etc) is appreciated.

Jpderuiter at 18:27, 2 September 2009

2009-09-02T18:27:56Z

@@ Line 147: / Line 147: @@
 : and "NT-AUTORITÃ„T\NETZWERKDIENST" for "S-1-5-20" on a German system)
 : The most often used SID's are defined in the included SpecialGroupsSIDs.nsh
 ; UserMgr<nowiki>::</nowiki>SetRegKeyAccess "USERID" "ROOTKEY" "REGKEY" "ACCESSMASK"
@@ Line 244: / Line 252: @@
 	Pop $0
          MessageBox MB_OK "DeleteUser Result: $0"
 FunctionEnd
@@ Line 328: / Line 349: @@
 * Return errorcode (WinError if available, else NTStatus) for LsaEnumerateAccountRights in function HasPrivilege
 * Return FALSE if user has no privileges in function HasPrivilege
 [[Category:Plugins]]

194.138.12.146: Added link to the new UsrMgr plugin discussion thread

2009-05-26T05:57:50Z

Added link to the new UsrMgr plugin discussion thread

â† Older revision		Revision as of 05:57, 26 May 2009
Line 6:		Line 6:
	Find the original plugin of the author (15.8.2006) at http://www.meinberg.de/download/utils/UserMgr.zip		Find the original plugin of the author (15.8.2006) at http://www.meinberg.de/download/utils/UserMgr.zip

	[http://forums.winamp.com/showthread.php?s=&threadid=209086 UserMgr thread on NSIS Discussion forum]		[http://forums.winamp.com/showthread.php?s=&threadid=209086 UserMgr thread on NSIS Discussion forum OLD]

			[http://forums.winamp.com/showthread.php?s=&threadid=302322 UserMgr thread on NSIS Discussion forum]

	== Description ==		== Description ==

Jpderuiter at 22:35, 25 January 2009

2009-01-25T22:35:58Z

Jpderuiter at 21:56, 23 January 2009

2009-01-23T21:56:59Z

â† Older revision		Revision as of 21:56, 23 January 2009
Line 19:		Line 19:

	You can reach me via PM, my forum account is hgerstung, so do not hesitate to contact me if you are experiencing difficulties.		You can reach me via PM, my forum account is hgerstung, so do not hesitate to contact me if you are experiencing difficulties.

			'''Please note: NSIS v2.42 or higher is required for this plugin to run properly.'''

	== Known Issues ==		== Known Issues ==

Jpderuiter at 17:26, 23 January 2009

2009-01-23T17:26:14Z

â† Older revision		Revision as of 17:26, 23 January 2009
Line 312:		Line 312:

	* Added GetCurrentDomain function		* Added GetCurrentDomain function

			JPR 23 Jan 2009:

			* Fixed a bug crashing the installer

	[[Category:Plugins]]		[[Category:Plugins]]

Jpderuiter at 00:18, 22 January 2009

2009-01-22T00:18:44Z

â† Older revision		Revision as of 00:18, 22 January 2009
Line 50:		Line 50:

	; UserMgr<nowiki>::</nowiki>GetCurrentUserName		; UserMgr<nowiki>::</nowiki>GetCurrentUserName
	: returns the username of the currently logged in user		: returns the username of the currently logged in user

			; UserMgr<nowiki>::</nowiki>GetCurrentDomain
			: returns the domainname of the currently logged in user

	; UserMgr<nowiki>::</nowiki>BuiltAccountEnv "USERID PASSWORD"		; UserMgr<nowiki>::</nowiki>BuiltAccountEnv "USERID PASSWORD"
Line 305:		Line 308:
	* Fixed a bug in SetUserInfo function when using for "FULLNAME"		* Fixed a bug in SetUserInfo function when using for "FULLNAME"
	* Added HasPrivilege function		* Added HasPrivilege function

			JPR 22 Jan 2009:

			* Added GetCurrentDomain function

	[[Category:Plugins]]		[[Category:Plugins]]

â† Older revision		Revision as of 22:35, 25 January 2009
Line 32:		Line 32:
	Here's a list of functions the DLL exports including the necessary parameters.		Here's a list of functions the DLL exports including the necessary parameters.

	; UserMgr<nowiki>::</nowiki>CreateAccount "USERID PASSWORD COMMENT"		; UserMgr<nowiki>::</nowiki>CreateAccount "USERID" "PASSWORD" "COMMENT"
	: creates a new user account, returns status string		: creates a new user account, returns status string

	; UserMgr<nowiki>::</nowiki>CreateAccountEx "USERID PASSWORD COMMENT FULLNAME USERCOMMENT FLAGS"		; UserMgr<nowiki>::</nowiki>CreateAccountEx "USERID" "PASSWORD" "COMMENT" "FULLNAME" "USERCOMMENT" "FLAGS"
	: creates a new user account, including the Fullname (Shown in the Welcome screen), returns status string		: creates a new user account, including the Fullname (Shown in the Welcome screen), returns status string

Line 57:		Line 57:
	: returns the domainname of the currently logged in user		: returns the domainname of the currently logged in user

	; UserMgr<nowiki>::</nowiki>BuiltAccountEnv "USERID PASSWORD"		; UserMgr<nowiki>::</nowiki>BuiltAccountEnv "USERID" "PASSWORD"
	: builds the User environment of the user (Registry hive, Documents and settings etc.), returns status string		: builds the User environment of the user (Registry hive, Documents and settings etc.), returns status string

Line 69:		Line 69:
	: deletes a user account, returns status string		: deletes a user account, returns status string

	; UserMgr<nowiki>::</nowiki>AddToGroup "USERID GROUPID"		; UserMgr<nowiki>::</nowiki>AddToGroup "USERID" "GROUPID"
	: adds a user to a group, returns status string		: adds a user to a group, returns status string

	; UserMgr<nowiki>::</nowiki>RemoveFromGroup "USERID GROUPID"		; UserMgr<nowiki>::</nowiki>RemoveFromGroup "USERID" "GROUPID"
	: removes group membership from a user, returns status string		: removes group membership from a user, returns status string

	; UserMgr<nowiki>::</nowiki>IsMemberOfGroup "USERID GROUPID"		; UserMgr<nowiki>::</nowiki>IsMemberOfGroup "USERID" "GROUPID"
	: returns "TRUE" if the user is a member of the specified group, else returns "FALSE"		: returns "TRUE" if the user is a member of the specified group, else returns "FALSE"

	; UserMgr<nowiki>::</nowiki>AddPrivilege "USERID PRIVILEGE"		; UserMgr<nowiki>::</nowiki>AddPrivilege "USERID" "PRIVILEGE"
	: adds a privilege to the user account, returns status string. You can find a list of privileges below.		: adds a privilege to the user account, returns status string. You can find a list of privileges below.

	; UserMgr<nowiki>::</nowiki>RemovePrivilege "USERID PRIVILEGE"		; UserMgr<nowiki>::</nowiki>RemovePrivilege "USERID" "PRIVILEGE"
	: removes a privilege from an account, returns status string. You can find a list of privileges below.		: removes a privilege from an account, returns status string. You can find a list of privileges below.

	; UserMgr<nowiki>::</nowiki>HasPrivilege "USERID PRIVILEGE"		; UserMgr<nowiki>::</nowiki>HasPrivilege "USERID" "PRIVILEGE"
	: returns "TRUE" if the user is has the specified privilege, else returns "FALSE".		: returns "TRUE" if the user has the specified privilege, else returns "FALSE".

	; UserMgr<nowiki>::</nowiki>CreateGroup "GROUPID COMMENT"		; UserMgr<nowiki>::</nowiki>CreateGroup "GROUPID" "COMMENT"
	: creates a new user group, returns status string		: creates a new user group, returns status string

Line 93:		Line 93:
	: deletes a user group, returns status string		: deletes a user group, returns status string

	; UserMgr<nowiki>::</nowiki>GetUserInfo "USERID FIELD"		; UserMgr<nowiki>::</nowiki>GetUserInfo "USERID" "FIELD"
	: returns a specific information for the given user-ID		: returns a specific information for the given user-ID

Line 112:		Line 112:
	:: returns a comment stored for the user		:: returns a comment stored for the user

	; UserMgr<nowiki>::</nowiki>SetUserInfo "USERID FIELD VALUE"		:; PASSWD_STATUS
			:: returns the Password status for the user (either NEVEREXPIRES or CANTCHANGE)

			; UserMgr<nowiki>::</nowiki>SetUserInfo "USERID" "FIELD" "VALUE"
	: sets a specific information for the given user-ID		: sets a specific information for the given user-ID

Line 134:		Line 137:
	:: sets the user password (Admin rights required)		:: sets the user password (Admin rights required)

	; UserMgr<nowiki>::</nowiki>ChangeUserPassword "USERID OLDPASSWORD NEWPASSWORD"		; UserMgr<nowiki>::</nowiki>ChangeUserPassword "USERID" "OLDPASSWORD" "NEWPASSWORD"
	: changes the user password (Admin rights not required)		: changes the user password (Admin rights not required)

Line 143:		Line 146:
	: The most often used SID's are defined in the included SpecialGroupsSIDs.nsh		: The most often used SID's are defined in the included SpecialGroupsSIDs.nsh

	; UserMgr<nowiki>::</nowiki>SetRegKeyAccess "USERID ROOTKEY REGKEY ACCESSMASK"		; UserMgr<nowiki>::</nowiki>SetRegKeyAccess "USERID" "ROOTKEY" "REGKEY" "ACCESSMASK"
	: adds/sets/revokes/denies access rights for registry keys		: adds/sets/revokes/denies access rights for registry keys

Line 318:		Line 321:

	* Fixed a bug crashing the installer		* Fixed a bug crashing the installer

			JPR 25 Jan 2009:

			* Return errorcode (WinError if available, else NTStatus) for LsaEnumerateAccountRights in function HasPrivilege
			* Return FALSE if user has no privileges in function HasPrivilege

	[[Category:Plugins]]		[[Category:Plugins]]