C# Credential Provider UpdateRemoteCredential not firing while connecting with RDP

Question

I developed a custom credential provider by using C# and it works both unlock and logon scenario locally. When its CREDUI scenario, i can logon or unlock remote computer with my local Credential provider.

My filter is registered in regedit. Same DLL but different classes.

What I cannot to do is, catch logon or unlock scenario on remote computer with my custom credential provider. I implemented filter interface. UpdateRemoteCredential not working. What could i missing? How can I say "use this credential provider while logging in" in server machine. Thanks.

your credential provider must be on target comp, not on comp from where rdp connect — RbMm
– RbMm, Commented May 16, 2023 at 12:47
My credential provider (same provider) is installed on the remote machine. But i always need to logon twice because NLA is enabled. I want to enter my credentials in client machine CREDUI then catch credentials on remote machine and go on my operation. — canowar
– canowar, Commented May 16, 2023 at 12:49
if you correct register filter on target comp, UpdateRemoteCredential will be called (if client pass some credentials). NLA not affect cred providers. not need logon twice — RbMm
– RbMm, Commented May 16, 2023 at 12:52
What do you mean by "correct"? Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Provider Filters and Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers these keys right? — canowar
– canowar, Commented May 16, 2023 at 12:58
here need look under debugger on target system, not on your code — RbMm
– RbMm, Commented May 16, 2023 at 13:07

canowar · Accepted Answer · 2023-05-17 08:54:14Z

2

Finally I did it and covered all scenarios both interactive and remote logon. Firstly, UpdateRemoteCredential is firing on target system (i didn't know that). Credential Filter must be installed correctly on target machine. After UpdateRemoteCredential fires, I needed to hold serialized credentials in SetSerialization method (ICredentialProvider implementation). After that, in ICredentialProviderCredential2 implementation, SetSelected method fires. In SetSelected method, I set pbAutoLogon to 1 (because i have credentials). After that, GetSerialization method is fired and its done.

Method order in RDP connections;

UpdateRemoteCredential (get serialized credentials)
SetSerialization (hold serialized credentials in implementation)
SetSelected (set auto logon property to 1)
GetSerialization (give serialized credentials to system)

answered May 17, 2023 at 8:54

canowar

17510 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

RbMm Over a year ago

more correct in GetCredentialCount set pbAutoLogonWithDefault to true and return pdwDefault

Collectives™ on Stack Overflow

C# Credential Provider UpdateRemoteCredential not firing while connecting with RDP

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related