PowerShell/CheckIsUserValid.ps1 at master · VimalShekar/PowerShell · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
<#
.Synopsis
	Script to check if a given local or domain username and password are valid.

.DESCRIPTION
    Script to check if a given local or domain username and password are valid.
    This script makes use of LogonUser Win32 API ad hence doesnt have any .NET dependency.

	Author : vimalsh@live.com

.EXAMPLE
    Check if the given local username and password is valid.
    IsLocalUserNamePasswordValid -UserName TestLocalUser1 -Password Test@Pass1


.EXAMPLE
	Check if the given domain username and password is valid.
    IsDomainUserNamePasswordValid -UserName TestDomUser1 -Password Test@Pass1 -DomainName testdom.local
#>

. .\FileLogging.ps1


# This is used by some of the functions below
$logonUserSignature =

@'

[DllImport( "advapi32.dll" )]
public static extern bool LogonUser( String lpszUserName,
                                     String lpszDomain,
                                     String lpszPassword,
                                     int dwLogonType,
                                     int dwLogonProvider,
                                     ref IntPtr phToken );

'@


$closeHandleSignature =

@'

[DllImport( "kernel32.dll", CharSet = CharSet.Auto )]
public static extern bool CloseHandle( IntPtr handle );

'@

$revertToSelfSignature =
@'

   [DllImport("advapi32.dll", SetLastError = true)]
   public static extern bool RevertToSelf();

'@

$AdvApi32 = Add-Type -MemberDefinition $logonUserSignature -Name "AdvApi32" -Namespace "PsInvoke.NativeMethods" -PassThru
$Kernel32 = Add-Type -MemberDefinition $closeHandleSignature -Name "Kernel32" -Namespace "PsInvoke.NativeMethods" -PassThru
$AdvApi32_2  = Add-Type -MemberDefinition $revertToSelfSignature -Name "AdvApi32_2" -Namespace "PsInvoke.NativeMethods" -PassThru
[Reflection.Assembly]::LoadWithPartialName("System.Security")


function IsLocalUserNamePasswordValid()
{
    param(
    [String]$UserName,
    [String]$Password
	)

    $Logon32ProviderDefault = 0
	$Logon32LogonInteractive = 2
	$tokenHandle = [IntPtr]::Zero
	$success = $false
	$DomainName = $null

	#Attempt a logon using this credential
	Write-LogFileEntry "IsLocalUserNamePasswordValid:Attempting logon using User: $UserName, Password: $Password" | Out-Null
	$success = $AdvApi32::LogonUser($UserName, $DomainName, $Password, $Logon32LogonInteractive, $Logon32ProviderDefault, [Ref] $tokenHandle)

	if (!$success )
	{
		$retVal = [System.Runtime.InteropServices.Marshal]::GetLastWin32Error()
		Write-LogFileEntry "IsLocalUserNamePasswordValid:LogonUser was unsuccessful. User may not be valid." | Out-Null
		return $false
	} else {
		Write-LogFileEntry "IsLocalUserNamePasswordValid:LogonUser was successful. Username is valid" | Out-Null
		$Kernel32::CloseHandle( $tokenHandle ) | Out-Null
		return $True
	}
}

function IsDomainUserNamePasswordValid()
{
    param(
    [String]$UserName,
	[String]$Password,
	[String]$DomainName
	)

    $Logon32ProviderDefault = 0
	$Logon32LogonInteractive = 2
	$tokenHandle = [IntPtr]::Zero
	$success = $false

	#Attempt a logon using this credential
	Write-LogFileEntry "IsDomainUserNamePasswordValid:Attempting logon using User: $UserName, Password: $Password" | Out-Null
	$success = $AdvApi32::LogonUser($UserName, $DomainName, $Password, $Logon32LogonInteractive, $Logon32ProviderDefault, [Ref] $tokenHandle)

	if (!$success )
	{
		$retVal = [System.Runtime.InteropServices.Marshal]::GetLastWin32Error()
		Write-LogFileEntry "IsDomainUserNamePasswordValid:LogonUser was unsuccessful. User may not be valid." | Out-Null
		return $false
	} else {
		Write-LogFileEntry "IsDomainUserNamePasswordValid:LogonUser was successful. Username is valid" | Out-Null
		$Kernel32::CloseHandle( $tokenHandle ) | Out-Null
		return $True
	}
}


#Set-LoggerAttribs -LogFilePath (".\mylog" + "$(get-date -Format 'hhmm_dd_mm_yyyy')" + ".txt")
#Write-LogFileEntry "testing if local username and password is valid"
#IsLocalUserNamePasswordValid -UserName TestLocalUser1 -Password Test@Pass1
#Write-LogFileEntry "testing if local username and password is valid"
#IsDomainUserNamePasswordValid -UserName TestDomUser1 -Password Test@Pass1 -DomainName testdom.local