Using LogonUser API in ASP.net with an account other than ASPNet account

From: nilapenn (nilapenn_at_gmail.com)
Date: 02/11/05 

Date: 11 Feb 2005 02:05:21 -0800

I am trying to use the LogonUser API function from ASP.Net. This works
fine on my machine which is Windows XP but fails with error code 1314
on windows 2000 server. I searched the web and found out that "Act as
part of operating system" is permission is needed for using LogonUser
API in windows 2000. When I give this permission to the asp.net account
it works fine. Since giving "Act as part of operating system" is a
security issue I created a local account with least privileges and gave
that "Act as part of operating system" permission to this account
and impersonated my asp.net application with this account. But still it
gives the same error. Any one has idea on how to user LogonUser by
giving "Act as part of operating system" to an account other than
ASP.Net?

Regards
Sriram.V

Relevant Pages

  • Re: LogonUser
    ... LogonUser would probably work, but you will be restricted from ... I'm not exactly sure how Windows does this, ... > logged on user's account. ... >> the TCB privilege which is only ...
    (microsoft.public.dotnet.security)
  • Re: impersonation in vb.net
    ... As the documentation for LogonUser states, ... (act as part of the operating system) ... under Windows 2000. ... Public Declare Auto Function CloseHandle Lib "kernel32.dll" _ ...
    (microsoft.public.dotnet.security)
  • Re: Documents and Settings
    ... |> folders under Documents and Settings: ... just apparently not your own user account. ... In Windows terminology, that is "Administrator". ... | operating system, users have separate accounts. ...
    (microsoft.public.windowsxp.general)
  • Re: New Accounts Problems
    ... > Yesterday I bought a desktop computer the operating system is Windows XP ... I created another two accounts one administrative account and one ... But the other two accounts have got a notepad ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Logon API on Windows 2000 with ASP.NET 1.1
    ... Also remember, under Win2K, the current account running the LogonUser code ... MUST have the "Act as part of the operating system" privilege to call ...
    (microsoft.public.dotnet.framework.aspnet.security)
Loading