Imerpsonation

From: Ash (anonymous_at_discussions.microsoft.com)
Date: 10/28/03

  • Next message: Eric Perlin [MS]: "Re: Problems with smart cards and windows XP SP1" 
    Date: Mon, 27 Oct 2003 15:24:54 -0800

    Hi All,

    I have an application that accesses some resources(files)
    from the network (file servers, Active Directory) AND
    local PC. While each individual user that uses this
    application MAY or MAY NOT have access to all files
    (defined by privileges), the application MUST always have
    access (highest privilege) to these files at all times.

    Previously, the application would use impersonation to
    attain this higher privilege, but with the introduction
    of 'SeImpersonatePrivilege', this is not possible anymore
    without modifying privileges at OS/Active Directory level.
    This may not be desirable to some customers.

    Any suggestions. Thanks in Advance.

  • Next message: Eric Perlin [MS]: "Re: Problems with smart cards and windows XP SP1"

    Relevant Pages

    • Roles Engineering for Active Directory
      ... Automatic Roles Engineering for Active Directory ... We have developed a unique technology that enables reverse engineering of ... the existing access rights and data stored in Active Directory into Logical ... Any insert change or delete in users' privileges. ...
      (comp.os.ms-windows.nt.admin.security)
    • User privilege caching in Active Directory?
      ... I have configured the privileges associatetd with these custom groups. ... When I change a user's group membership, ... I'm also talking about privileges on the Active Directory ... If there is such a caching (and I cannot force the refresh) I would ...
      (microsoft.public.windows.server.active_directory)
    • Re: Can administrator privileges be limited
      ... account and give it a *few* special rights to do certain things. ... Active Directory has greatly improved on this and made it a lot ... > If the privileges are limited, how does the admin get them back? ... > I have seen several postings that say they are using Admin but don't> have the privileges to install software or add a printer. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: My boss asked me a strange question
      ... and privileges in a sql database. ... Today, my boss asked me why don't I store the login info, groups and ... strange, because I think Active Directory is for internal network users, ... and not for external users of your web site. ...
      (microsoft.public.windows.server.active_directory)
    • Privileges and Authorization
      ... Hi Iam looking for a tool that can show me the Privileges ... of an individual user through out the entire Domain, ... It should basically do the same as Tree ...
      (microsoft.public.win2000.security)