Windows Authentication

From: Bugs (martin.button@nospam.program-products.co.uk)
Date: 09/03/02 

From: "Bugs" <martin.button@nospam.program-products.co.uk>
Date: Tue, 3 Sep 2002 15:23:20 +0100

I'm trying to develop an application using classic asp that uses Windows
Authentication on a Windows 2000 domain. From the asp I need to be able to
tell which windows groups a user is in in order to be able to display
appropriate content (ie hide content a user is not allowed to view).

To do this I have create an ActiveX dll in VB that makes use of
GetProcessID, OpenProcessToken, GetTokenInformation api calls to retrieve
the groups that a user is a member of. This works fine when run from a
desktop app. When run from the asp script however I can only make the calls
when logged in as an administrator and even then it doesn't return all the
groups the user is a member of but instead returns only Administrators,
Everyone and Authenticated Users.

I thought that seeing as how IIS uses impersonation that the token would
contain the correct information, I was obviously wrong. Is there any other
way from an asp script to discover which windows groups the current
authenticated user is a member of?

TIA