You cannot use passfilt.dll
to capture password change events. The dll is a filter used by Windows to check the quality of a password.
The filter contains three functions that are called in sequence (InitializeChangeNotify
, PasswordFilter
and PasswordChangeNotify
). The first is used to initialize the filter, the second is used to check the quality of a password, the last is used to notify the dll that Windows has changed the password. All functions are called by Windows.
You can call the functions as well but you cannot use PasswordChangeNotify
to capture password change events.
If you want to capture password change events, you'll have to write a filter yourself and install it on your machine. Then Windows will call PasswordChangeNotify
to let you know a password has changed.