RE: WindowsIdentity.Impersonate() fails

From: Dominick Baier (dotnet_at_leastprivilege.com)
Date: 12/20/04 

To: microsoft.public.dotnet.security
Date: Mon, 20 Dec 2004 03:06:37 -0800

in the local security policy - user rights assignment...

 

 ---
 Dominick Baier - DevelopMentor
 http://www.leastprivilege.com

   nntp://news.microsoft.com/microsoft.public.dotnet.security/<414E3931-5A5C-43C5-85E0-0F0E2B4E034E@microsoft.com>

 i am afraid , where can i find whether the account has that privilege or not.
 
 
 "Dominick Baier" wrote:
 
> Does the account that tries to impersonate hold the "Impersonate after Authentication" privilege?
>
>
>
> ---
> Dominick Baier - DevelopMentor
> http://www.leastprivilege.com
>
> nntp://news.microsoft.com/microsoft.public.dotnet.security/>
>
> Hi,
>
> i am using LogonUser function with LOGON32_LOGON_INTERACTIVE and other
> parameters. using DuplicateToken function with securitypermissions = 2 and
> creating WindowsIdentity object with the duplicatetoken obtained from
> DuplicateToken function.
> i am trying to impersonate but is gives error saying "unable to
> impersonate", i would like to know all the reasons why
> windowsIdentity.Impersonate() fails saying "Unable to impersonate".
>
> Thanks
> Ravi
> ravib
>
> [microsoft.public.dotnet.security]
>
 
 [microsoft.public.dotnet.security]

Relevant Pages

  • Re: security problem with xp_cmdshell
    ... Dominick Baier, DevelopMentor ... On 2000 - when sa calls XP_cmdshell it runs as the service account ... This exe program adds user to the active directory. ... Unhandled Exception: System.NullReferenceException: Object reference ...
    (microsoft.public.dotnet.security)
  • Re: problem writing a file
    ... if you are impersonating depends on the impersonate=true/false switch in web.config. ... trust for delegation is a active directory setting. ... Dominick Baier - DevelopMentor ... The local ASPNET account has no network credentials on another ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Winform: Impersonating user with no password set
    ... I can logon with that account. ... e.g. using runas - or winlogon? ... Dominick Baier ...
    (microsoft.public.dotnet.security)
  • Re: Security issues with Win2003 and ASPNet app
    ... make sure the account your worker process runs under hat full control to ... the account is in the IIS_WPG group? ... Dominick Baier - DevelopMentor ... my web service and web site are in their own app group. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: ASP.NET Impersonation in a Windows 2003 non domain member serv
    ... or maybe - you could impersonate a domain account using a token created with the NEW_CREDENTIAL option. ... Dominick Baier ...
    (microsoft.public.dotnet.framework.aspnet.security)