Re: WebControls error in an application running under an impersonate identity

From: Alex Muntean (munteana@ewc.co.jp)
Date: 11/29/02 

From: "Alex Muntean" <munteana@ewc.co.jp>
Date: Fri, 29 Nov 2002 20:52:20 +0900

Thanks again for your long answer.

I know about the article you pointed out on MSDN web site [BUG: ASP.NET
Does Not Work with the Default ASP.NET Account on a Domain Controller] but
it's not the case since the IIS web server where the application resides is
not the Domain Controller.

In my case it doesn't really matter who is in the machine.config file
("SYSTEM" or "machine" or another user). All that I need from the user under
ASP.NET process is running, is the ability to read/write in some folders and
(this is "hot" :p): "Act as part of the OS", because I really need to
impersonate that particular domain user. Which, of course, is a very weak
domain user, except the ability to access the SQL DB (not full access. Only
the ability to run the Stored Procedures we use in our application) so even
if the app crashes and someone gets control using that user, he/she cannot
do ( I hope our admins did their homework well :) ) anything with that user
on the network.
Of course I would prefer to have the user info encrypted in registry or some
other more secure place. But, indeed, we have to wait until .NET 1.1

Since I was continuously getting that stupid "Access Denied" error, I
abandoned the idea of using the IE WebControls and I use now some plain old
DropDownLists.... maybe in 1.1 it will work...

.a.

Relevant Pages

  • Re: create support admin user
    ... configuring the "logon locally" user right in Domain Controller Security ... being an administrator but you can test that out to see if it suits your ... I would like to give a support user the ability ...
    (microsoft.public.win2000.security)
  • Re: stopping redirection from "http://msdn.microsoft.com/" to Mobile page
    ... I’m not sure if you should use this but reg-king alows you to make ie appear ... resolution screen of 640 by 480, as well as the ability to view in landscape ... would be nice if i could read from the msdn web site the same content as on ...
    (microsoft.public.pocketpc)
  • Account to shutdown a Domain Controller - non-domain admin
    ... Is there a way to make an operator account that would have the ability to ... Or would there be a way to shutdown a domain ... the ability to shutdown our domain controller in case of a planned power ...
    (microsoft.public.windows.server.general)
  • RE: Account to shutdown a Domain Controller - non-domain admin
    ... there is a way to shutdown a domain controller without having to log ... > Is there a way to make an operator account that would have the ability to ...
    (microsoft.public.windows.server.general)
  • Administer DC at remote site without domain admin rights
    ... I have a server at a remote site that is a domain controller (W2k3 ... I would like to give a user the ability to be an admin on ... the local box without being a domain admin. ... local logon now that it's a DC, I think I may be out of luck but ...
    (microsoft.public.windows.server.security)