 | |
Winform: Impersonating user with no password set
Dotnet Security microsoft.public.dotnet.security
 |
| | Thread Tools | Search this Thread | Display Modes |
#1
 
| |||
| |||
|
Winform: Impersonating user with no password set -
07-10-2007
, 10:23 AM
#2
| |||
| |||
|
|
Hi Is there a way to impersonate to a local account with no password defined? My tests were negative until now. Thanks. |
#3
| |||
| |||
|
|
Hi Is there a way to impersonate to a local account with no password defined? My tests were negative until now. Thanks. |
#4
| |||
| |||
|
|
Can you logon with that account? e.g. using runas - or winlogon? ----- Dominick Baier (http://www.leastprivilege.com) Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp) Hi Is there a way to impersonate to a local account with no password defined? My tests were negative until now. Thanks. |
#5
| |||
| |||
|
|
Can you logon with that account? e.g. using runas - or winlogon? ----- Dominick Baier (http://www.leastprivilege.com) Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp) Hi Is there a way to impersonate to a local account with no password defined? My tests were negative until now. Thanks. |
#6
| |||
| |||
|
|
Can you logon with that account? e.g. using runas - or winlogon? ----- Dominick Baier (http://www.leastprivilege.com) Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp) Hi Is there a way to impersonate to a local account with no password defined? My tests were negative until now. Thanks. |
#7
| |||
| |||
|
|
Can you logon with that account? e.g. using runas - or winlogon? ----- Dominick Baier (http://www.leastprivilege.com) Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp) Hi Is there a way to impersonate to a local account with no password defined? My tests were negative until now. Thanks. |
#8
| |||
| |||
|
|
Also, it may be possible to use S4U logon. You'll need TCB privilege in your process account in order to get an impersonation level token and will need to run the code on Win2K3 or higher and have AD 2003 in 2003 forest functional level to use this AD feature. It also only works with domain accounts. S4U is easy to use in .NET. Just use the WindowsIdentity constructor that takes the user's UPN. Joe K. -- Joe Kaplan-MS MVP Directory Services Programming Co-author of "The .NET Developer's Guide to Directory Services Programming" http://www.directoryprogramming.net -- "Dominick Baier" <dbaier (AT) pleasepleasenospam_leastprivilege (DOT) com> wrote in message news:8e6a913a137ba8c9912eb2a36080 (AT) news (DOT) microsoft.com... Can you logon with that account? e.g. using runas - or winlogon? ----- Dominick Baier (http://www.leastprivilege.com) Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp) Hi Is there a way to impersonate to a local account with no password defined? My tests were negative until now. Thanks. |
#9
| |||
| |||
|
|
Also, it may be possible to use S4U logon. You'll need TCB privilege in your process account in order to get an impersonation level token and will need to run the code on Win2K3 or higher and have AD 2003 in 2003 forest functional level to use this AD feature. It also only works with domain accounts. S4U is easy to use in .NET. Just use the WindowsIdentity constructor that takes the user's UPN. Joe K. -- Joe Kaplan-MS MVP Directory Services Programming Co-author of "The .NET Developer's Guide to Directory Services Programming" http://www.directoryprogramming.net -- "Dominick Baier" <dbaier (AT) pleasepleasenospam_leastprivilege (DOT) com> wrote in message news:8e6a913a137ba8c9912eb2a36080 (AT) news (DOT) microsoft.com... Can you logon with that account? e.g. using runas - or winlogon? ----- Dominick Baier (http://www.leastprivilege.com) Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp) Hi Is there a way to impersonate to a local account with no password defined? My tests were negative until now. Thanks. |
#10
| |||
| |||
|
|
Yes, I can logon with that account. The system is Windows XP Home Ed. with SP2 Dominick Baier a scris: Can you logon with that account? e.g. using runas - or winlogon? ----- Dominick Baier (http://www.leastprivilege.com) Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp) Hi Is there a way to impersonate to a local account with no password defined? My tests were negative until now. Thanks. |
|
« Previous Thread
|
Next Thread »
| Thread Tools | Search this Thread |
| Display Modes | |
Linear Mode
| |
Powered by vBulletin Version 3.5.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.