Role empty in WindowsPrincipal

From: Peter Moberg (pmoberg_at_san.rr.com)
Date: 07/25/03

  • Next message: Tian Min Huang: "RE: Sharing Authentication cookies between 1.0 and 1.1" 
    Date: Thu, 24 Jul 2003 22:00:54 -0700

    Hello.

    I have a test system with one Win2003 server as a domain controller and one
    WinXP client. The domain has been setup and the WinXP client is part of the
    domain. I have added a domain user that I log on as on the WinXP client. I
    wrote a little program to see what groups the user belonged to after having
    logged in.

    this is part of the code..

    AppDomain.CurrentDomain.SetPrincipalPolicy(
    System.Security.Principal.PrincipalPolicy.WindowsPrincipal);
    System.Threading.Thread.CurrentPrincipal.IsInRole(
    System.Security.Principal.WindowsBuiltInRole.User.ToString());

    Basically Im just telling the system to make sure that the CurrentPrincipal
    returns a WindowsPrincipal type and the last statement is just to make sure
    that the roles are loaded. (I guess the .NET framework will not load all the
    roles until you call the IsInRole function)

    When I look at the CurrentPrincipal in the watch window it says that the
    user belongs to x nbr of groups. I check the groups and can see that they
    indeed are the domain groups...like Domain Users and Domain Admins...

    However I have also put the specific user in a domain local group called
    TestGroup. This one doesnt show up in the roles list for the
    WindowsPrincipal. However, there is one entry in the role list that is the
    empty string and Im wondering if there is a problem with getting to domain
    local groups?

    Does anyone know if the domain local groups will not be listed in the
    WindowsPrincipal object... or do any have any insight into this matter.

    Any help is greatly appreciated!

    Thanks,

    Peter

  • Next message: Tian Min Huang: "RE: Sharing Authentication cookies between 1.0 and 1.1"