Re: Authorization problem

From: Joe Kaplan \(MVP - ADSI\) (joseph.e.kaplan_at_removethis.accenture.com)
Date: 10/26/04 

Date: Tue, 26 Oct 2004 10:52:18 -0500

One other thing to check:

Can you do a programmatic check instead of a declarative one? Try
Context.User.IsInRole("machine\administrators") or
Thread.CurrentPrincipal.IsInRole("machine\administrators")?

Those should do the same thing as the declarative demand, but it is worth a
shot.

Another thing to try is to use reflection on _GetRoles private method on
WindowsIdentity to see what the actual values are. This can be helpful for
troubleshooting Windows group resolution. Don't use this in production
though!

Google will dig up a bunch of code samples showing how to do that if you
need it.

Joe K.

"Nikolay Petrov" <johntup2_nospam_@mail.bg> wrote in message
news:eVwiaG3uEHA.3948@TK2MSFTNGP15.phx.gbl...
>I have done that. It is fine.
> Something else is broken. The auditing don't show nothing also.
>
> "Joe Kaplan (MVP - ADSI)" <joseph.e.kaplan@removethis.accenture.com> wrote
> in message news:efhvF42uEHA.1976@TK2MSFTNGP09.phx.gbl...
>> Are you certain that the client is being authenticated with Windows
>> authentication? It would probably be a good idea to dump out the value
>> of Context.User.Identity.Name and make sure it is the user that you think
>> it is.
>>
>> Joe K.

Relevant Pages

  • Re: Drawing on DC
    ... can you finally say me about a good guide to Windows ... for drawing in OnMouseMove is that the mouse is captured and the window ... The strokes are going into the container where it counts. ...
    (microsoft.public.vc.mfc)
  • Re: Welcome to windows/Switch user locked
    ... "Joe" wrote in message ... First I am working with windows XP. ... I'll call them Act 1 and Act 2. ... allowed me to access the two accounts. ...
    (microsoft.public.windowsxp.accessibility)
  • RE: Windows Explorer
    ... Hi, Joe. ... When running on the parallel OS, the 'big' folder (which ... original Windows installation, I found that that also now ... >temporarily uninstall the PaintShop Pro software to check ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: 11,000 new viruses targeting Microsoft Windows
    ... >>> labelled incompetent because they chose Windows, ... >>He empowered his employees to choose as they will for their own reasons. ... And if Joe ... If you understood management, you'd understand Joe has empowered his ...
    (comp.sys.mac.advocacy)
  • Re: Unlock acct permissions
    ... You know Joe I have many Windows books and have read them but unfortunely ... >> group in that OU with permission to unloack accounts. ...
    (microsoft.public.win2000.active_directory)