Re: CreateProcessWithLogonW Switching User Credential
From: Ash (anonymous_at_discussions.microsoft.com)
Date: 10/31/03
- Previous message: Ohaya: "Re: Does deleting a certificate cause private key deletion?"
- In reply to: Chuck Chopp: "Re: CreateProcessWithLogonW Switching User Credential"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 30 Oct 2003 20:01:28 -0800
Chuck you are correct in saying that there is nothing to
Revert back to in the case of "CreateProcessWithLogonW".
However, when you initially use this function
with "LOGON_NETCREDENTIALS_ONLY" option, a different set
of credentials are used to access NETWORK resources. The
process that gets created with this function INHERITS
credentials of the LOGGED ON user TOO. Therefore, you can
access resources that LOGGED ON USER + NET LOGON USER can
access.
What I want to do is access network resources that ONLY
LOGGED ON USER can access, that is, switch ON/OFF NET
LOGON USER credentials to use network resources.
IMPERSONATION cannot be used due to the introduction
of 'SeImpersonatePrivilege' that inhibits 'Impersonation'
by user belonging to 'USER' group account. And, the
software must be able to run under any group account.
I would greatly appreciate your thoughts on this.
- Previous message: Ohaya: "Re: Does deleting a certificate cause private key deletion?"
- In reply to: Chuck Chopp: "Re: CreateProcessWithLogonW Switching User Credential"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
