Re: Thread identity

From: Joe Kaplan \(MVP - ADSI\) (joseph.e.kaplan_at_removethis.accenture.com)
Date: 10/06/05 

Date: Thu, 6 Oct 2005 15:07:03 -0500

You can impersonate an administrator for the duration of the call, or you
can run the worker process as the administrator and undo the impersonation
during the call. You can also put the admin code in a COM+ application that
runs under a different identity.

The WindowsImpersonationContext starts and stops impersonation. The only
other thing is getting the logon token for the administrator to use to
impersonate. The MSDN docs on WindowsImpersonationContext have a good
sample on that though. Then the problem is securely storing the
credentials...

Joe K.

"Raster Space" <raster2000@hotmail.com> wrote in message
news:di3v0t$pdn$1@phys-news1.kolumbus.fi...
>I have managed Web Application running on ASPNET user rights. How can I
>execute certain (not all) methods with administrator privileges? Any ideas?

Relevant Pages

  • Re: How can a user impersonate an adminstrator
    ... But only if you are connecting to a remote computer, ... You can not impersonate an administrator on the "local" computer without ...
    (microsoft.public.win32.programmer.wmi)
  • Re: Impersonation and MAPI
    ... happens in case 2 when that user is the not same as the mailbox i want ... I need to impersonate in that case. ... Exchange Administration: If this is the case, ... Administrator has the right to view the users' mailboxes (delegate ...
    (microsoft.public.win32.programmer.messaging)
  • Re: CreateProcessAsUser - Access Denied (in some situations)
    ... > I have a windows service that allows a user to log in to our server ... > 2) ImpersonateLoggedOnUser() to set the thread to impersonate that user ... every account is part of the "Domain Users" ... domain account which is part of the local administrator group, ...
    (microsoft.public.win32.programmer.kernel)
  • NTLM Win2000 and Impersonation
    ... I am using NTLM in Win2000 to impersonate an Administrator ... account which is part of Administrator group everything ... Administrator group account, the token returned has ...
    (microsoft.public.platformsdk.security)
  • Re: Impersonating a windows user in W2K help required.
    ... WindowsImpersonationContext should work okay, but you need to get a logon ... WindowsIdentity to impersonate. ... > data files, due to the local file restriction policy. ...
    (microsoft.public.dotnet.security)