Notification Packages

HKLM\SYSTEM\CurrentControlSet\Control\Lsa

Data type Range Default value
REG_MULTI_SZ File name[ file name...] FPNWCLNT RASSFM KDCSVC scecli

Description

Specifies the dynamic-link libraries (DLLs) that are loaded or called when passwords are set or changed. To specify more than one file, list the file names one above the other by pressing ENTER between each file name.

This entry is often used to load libraries for services such as File and Print Services for NetWare.

You can use this entry to implement custom DLLs which specify alternate criteria for valid passwords, such as complex password rules. Notification packages that implement password verification are recommended for all primary and backup domain controllers. You can also write a custom password filter to fulfill special security requirements.

Tip Image Tip

For more information on and sample code for creating password filters, see the Microsoft Knowledge Base link on the Web Resources page. Search the Knowledge Base for Article Q151082, or use the keywords Password Change Filtering .

To audit the loading of notification packages, click Start, point to Programs, point to Administrative Tools, and then select Local Security Policy. Expand Local Policies, and then double-click Audit Policy. Double-click Audit System Events, and then use the Success and Failure check boxes.