*** BETA INFORMATION *** FOR WINPWL 3 MILLENNIUM EDITION BETA TWO *** *** THIS DOCUMENT IS SUBJECT TO CHANGE *** WinPWL 3 Millennium Edition by Aaron Klotz Visit the official WinPWL site! http://winpwl.teamohms.org/ ========================================== I don't want anything for this program, but if you distribute it, please ensure that this file accompanies WinPWL3.exe in the archive. This program is freeware, and therefore is not subject to a fee of any kind. This program is unsupported and is provided "as is" - use at your own risk! DISCLAIMER: By using this program the user agrees that any legal trouble they may get into for using this software to obtain unauthorized access to passwords is their responsibility. The author of this program assumes no responsibility for such activities. This software was not intended for obtaining passwords that the user is not supposed to have access to. It was only designed for recovering forgotten passwords or for technicians/administrators. Feedback ======== I would really appreciate it if you would drop me a line telling me what operating system you are running and how WinPWL worked on the computer you ran it on. Did it perform as expected? I would like to know. Drop me a line at winpwl@teamohms.org. No suggestions or for future versions please, as I'm entering university and will have even less time to work on this little project. I hope to release a fourth version of WinPWL, but don't count on it. Using WinPWL 3.5 ================ Pretty straightforward stuff. At the top of the WinPWL window you will see the username and password for the currently logged on user. The listbox contains a list of all the passwords stored in the PWL file for that user. Each entry contains the password type, the resource it is associated with, the username (if applicable), and the password itself. The Copy button allows you to copy either the currently selected password or all the passwords to the clipboard so that you can paste them into another application. Clicking the Refresh button will update the password list to reflect any changes you have made. To add a new password resource, click the Add button. Choose the correct tab depending on the type of password you plan to add to the list. Simply fill out the property page with the information it requires, click OK, and the password will be added to the PWL file. For the Other Entries tab, you will need to know what it is asking for. The resource is the name of the server the password is for. Naming conventions depend on the type of network. Enter the resource, the password, and the password type. The type must be between the numbers 1 and 254. Here are the most common types: 1 - NT Domain 2 - NT Server 3 - Shared Drive 4 - MAPI 6 - Dial-up Networking or CryptoAPI Key 18 - NetWare Server 19 - WWW resource (Internet Explorer) The Edit button will only allow you to change the password for an existing resource. It will not let you rename the resource or change the type. To do this, you will need to add a new resource. It will also forbid you from editing CryptoAPI entries, since editing the key could really screw things up. Please try to understand that editing the passwords in the PWL file only affects the cache on that machine. For example, if you change somebody's PWL password for a NetWare server, their password for access to the server stays the same, but their workstation trys to log them on with the password you have changed it to. They will not be able to log on with the new password unless it gets changed on the server side as well. Clicking the Remove button deletes the selected password from the PWL file. The infamous type 19 bug has now been fixed - see the version history for more info. Clicking the System Pwd... button allows you to change the system logon password. Clicking the Filter... button allows you to specify a type. When filtering is enabled, WinPWL will only display password entries for that given type. Very handy for isolating a particular password type. New for Version 3.5 - WinPWL Plugins! ===================================== When I released WinPWL 3 it was obvious that many users out there needed more functionality than WinPWL can provide. Quite honestly I do not have the time to deal with such issues. I did, however, manage to find the time to write a few functions that are useful to you C programmers out there. The file WINMESP.DLL is actually a plugin that adds support for Windows Me to WinPWL. You can extend the program with your own plugins by downloading the WinPWL SDK from the official website. The SDK includes header files, .lib files, and documentation. Unfortunately I cannot provide tech support for the plugin API, so you'll just have to work it out on your own. Sorry, but I just don't have the time! No, writing your own plugin will not enable WinPWL to run on Windows 2000. Here's a hint: The SessionVerifyPasswordEx() function exported by WinPWL is VERY handy! Much more useful than WNetVerifyPassword, I guarantee! Plugins from a User's Perspective ================================= WinPWL doesn't care if you use plugins or not. If you delete WINMESP.DLL, for example, WinPWL will still run. It won't support Windows Me, but it will run. Any plugin you use just needs to be copied to the same directory as WinPWL, and WinPWL will handle the rest. Some plugins requre user interaction, in which case there will be a menu entry under the Plugins button. WinPWL 3.5 allows up to 16 plugins to be loaded at one time. I'm hoping some programmers out there try out the plugin API and write some cool extensions for WinPWL. Version History =============== 3.5 - Also known as WinPWL 3 Millennium Edition. Fixed a bug that prevented removal of type 19 passwords. Added a plugin API so that any interested developers out there can write their own custom plugins to extend WinPWL. (See plugin section of readme file.) Used the plugin API to write a system password provider to add support for Windows Millennium Editon. Fixed some bugs in the owner draw code for the main listbox. 3 - Abandoned the old code base and rewrote the entire program from scratch! Contains a brand new, simplified interface, with more features, including the ability to view and edit NetWare passwords, and the ability to view and change the system password (when the target system is left unattended). A filter option has been added so that only passwords of a particular type can be displayed, and customized add and edit dialog boxes allow for easier entry of passwords. My new linked-list manager greatly improves memory management over the previous versions of WinPWL. 2.03 - Better interpretation of PWL file's contents, including CryptoAPI keys and IE site passwords. Username is now displayed in uppercase, since the PWL file is encrypted using an uppercase form of the username. About box now allows user to disagree with disclaimer, which then aborts the program. 2.02 - Improved icons, added about box. Fixed the system menu. Changed the startup code so that WinPWL tries to log you in before it dumps the passwords. This should prevent the "user not logged in" error messages that previous versions displayed. WinPWL now displays the current username. Memory use has been changed. 2.01 - Removed some debugging stuff that I forgot to take out of version 2.00! Oops! 2.00 - Added features for adding, editing, and removing passwords from PWL files. 1.01 - In response to dschneid's complaints I added an icon. Fixed missing DLL bug. Had to static link the runtime library, because I couldn't avoid using it! 1.00 - Initial release - Allows inspection of passwords in PWL files and the ability to copy them to the clipboard. Aaron Klotz