According to http://msdn.microsoft.com/en-us/library/aa378804%28VS.85%29.aspx, one of the members passed to NPLogonNotify is lpAuthentInfo . In XP, the Domain member of this structure contained the domain one was authenticating against (which in the case of authenticating against a unix kerberos realm, would be the unix kerberos realm). In Windows 7 Enterprise 32-bit (I have not tested any other editions or 64-bit), the Domain member would appear to be an empty string. This breaks any credential manager DLLs that are looking for the domain/kerberos realm one authenticated against. This would appear to be a bug in Windows 7. thanks.

Hi, Since this question is related to software development, please discuss in our MSDN forum. Microsoft Developer NetworkArthur Xie - MSFT