Re: Role based security on local machine

From: Dominick Baier [DevelopMentor] (dbaier_at_pleasepleasenospamdevelop.com)
Date: 04/29/05 

Date: Fri, 29 Apr 2005 06:55:58 -0700

Hello Nicole Calinoiu" calinoiu REMOVETHIS AT gmail DOT com,

or even better - use the WindowsBuiltInRole Enum - Builtin groups are localized
and that is a major PITA!!

BUILTIN\Administrator == VORDEFINIERT\Administrator (german)

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

> Is the "MACHINENAME" from your sample code the name of the local
> machine or another machine on the network? If it's the local machine,
> try using the "BUILTIN\Administrators" syntax instead. If it's not
> the local machine, is it possible that your local account doesn't have
> permissions to access the target machine at all?
>
> "Diane" <dweaver@hcd.net> wrote in message
> news:1114774743.636573.247460@o13g2000cwo.googlegroups.com...
>
>> I am testing role based security and have a problem when logged into
>> the local machine. It always fails when I specify a group instead of
>> a user name. Everything works fine when I'm logged into the domain.
>> I'm running it on an XP machine. Following is the code:
>>
>> Dim currentDomain As AppDomain = AppDomain.CurrentDomain
>>
>> currentDomain.SetPrincipalPolicy(PrincipalPolicy.WindowsPrincipal)
>>
>> Dim myIdentity As WindowsIdentity = WindowsIdentity.GetCurrent Dim
>> myPrincipal As New WindowsPrincipal(myIdentity)
>> Thread.CurrentPrincipal = myPrincipal
>>
>> Dim myPermission As New PrincipalPermission(Nothing,
>> "MACHINENAME\Administrators")
>>
>> Try
>> myPermission.Demand()
>> MessageBox.Show("Welcome to the show! You have access!")
>> Catch ex As Exception
>> MessageBox.Show("Get out of here! You don't have access!")
>> MessageBox.Show(ex.Message)
>> End Try

Relevant Pages

  • Re: Role based security on local machine
    ... Hello Nicole Calinoiu" calinoiu REMOVETHIS AT gmail DOT com, ... Dominick Baier - DevelopMentor ... > the local machine, is it possible that your local account doesn't have ...
    (microsoft.public.dotnet.security)
  • Re: Role based security on local machine
    ... gvein that only strings are accepted for identifying ... I know that I've seen a localization-safe version of the names ... > Hello Nicole Calinoiu" calinoiu REMOVETHIS AT gmail DOT com, ... >> the local machine, is it possible that your local account doesn't have ...
    (microsoft.public.dotnet.security)