Winform: Impersonating user with no password set

#11

how do you impersonate??

by calling LogonUser? do you get a valid token back when passing in no password?

-----
Dominick Baier (http://www.leastprivilege.com)

Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp)

Quote:

Yes, I can logon with that account.
The system is Windows XP Home Ed. with SP2
Dominick Baier a scris:

Can you logon with that account?

e.g. using runas - or winlogon?
-----
Dominick Baier (http://www.leastprivilege.com)
Developing More Secure Microsoft ASP.NET 2.0 Applications
(http://www.microsoft.com/mspress/books/9989.asp)

Hi

Is there a way to impersonate to a local account with no password
defined?
My tests were negative until now.
Thanks.

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Winform: Impersonating user with no password set

Dotnet Security microsoft.public.dotnet.security

Re: Winform: Impersonating user with no password set - 07-11-2007 , 07:24 AM