Re: Handle leak in Windows 2003 Authorization Manager?

From: Gary Chang[MSFT] (v-garych_at_online.microsoft.com)
Date: 12/08/04

  • Next message: RajNej.: "SetEntriesInAcl Fails :-("
    Date: Wed, 08 Dec 2004 02:37:02 GMT
    
    

    Hi Stefan,

    We could not reproduce the token handle leak problem using your modified VB
    sample code (modified to use a local XML store and a redmond user account)
    on W2K3.
     
    When you run this VB 6.0 test() method repeatedly, does it leak one token
    handle for each method call?
    If you look at the token handle in Process Explorer, does it show the
    username as NT AUTHORITY\SYSTEM or CC\Stefan?
     
    Can you reproduce the problem on other W2K3 systems?
     
    By the way, for performance reasons, recommended approach is to use
    InitializeClientContextFromToken, if a token for that domain user account
    is available or if you are constructing client context for the user account
    under which the code runs, specify NULL for ullTokenHandle parameter.
     
    If a token is not available and if
    IAzApplication.InitializeClientContextFromName needs to be used, it is
    advised to cache the client context handle returned by
    AzApplication.InitializeClientContextFromName for a given domain user
    account and use it later for future use in the same process to avoid
    expensive membership evaluation/S4U logon calls everytime.

    Thanks!

    Best regards,

    Gary Chang
    Microsoft Online Partner Support

    Get Secure! - www.microsoft.com/security
    This posting is provided "AS IS" with no warranties, and confers no rights.
    --------------------


  • Next message: RajNej.: "SetEntriesInAcl Fails :-("

    Relevant Pages

    • Re: Problem editing footnotes and endnotes
      ... I still can't reproduce either one, and my machine is no longer customized. ... it is probably due to some conflict with the login items/utilities in your user account. ... Re #1--when I double click on a footnote number in Draft view, ... check the Preferences | Edit settings. ...
      (microsoft.public.mac.office.word)
    • Re: UnauthorizedAccessException when updating a directory service entry from ASP.NET
      ... I did a simple test on Windows Server 2008 and it works fine. ... Then I tried several hours on my side to reproduce this issue and finally ... found a way to reproduce the same exception. ... "User cannot change password" option for the user account. ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: Explorer.exe not loading at startup
      ... To analyze the issue, would you please reproduce the issue and then ... Please create a new user account either in the Active Directory or the ... local computer, and then logon the problematic computer with the new user, ...
      (microsoft.public.windows.file_system)
    • RE: Explorer.exe not loading at startup
      ... would you please reproduce the issue and then collect ... and send the userenv.log to tfwst@xxxxxxxxxxxxx so that we can assistant ... Please create a new user account either in the Active Directory or the ... local computer, and then logon the problematic computer with the new user, ...
      (microsoft.public.windows.file_system)