Method and apparatus for creating conditional windows process tokens

A system to create a custom authentication and authorization service that intercepts and overrides a standard authentication and authorization mechanism for computers connected to a network comprising:

• a local security authority module (LSA) shim layer that runs on each of a plurality of computers connected via a network;
• an authentication agent running on each of a corresponding one of said plurality of computers configured to accept authentication and authorization requests and perform authentication and authorization responses to said requests;
• a custom authentication and authorization data store that stores authentication and authorization information other than or in addition to standard authentication and authorization information;
• wherein the LSA shim layer is configured to:
• i) unregister standard LSA plug-ins then register itself with an LSA module;
• ii) operate to intercept authentication and authorization calls intended for said standard LSA plugins to selectively process the intercepted calls and pass other calls to the standard LSA plug-ins;
• iii) pass responses from the standard LSA plug-ins back to the LSA module.