impersonationContext vs Process (Diagnostics) somebody help.

[Guest]

I want to execute a .exe file through my ASP.Net C# .Net framework 1.1
application with user "X" credential. i used impersonationContext ( see notes
at http://support.microsoft.com/?id=306158#4) to accomblish this. I pretty
sure that this concept of imperonation works.

Since Process.Start always uses the security context of the parent ASP.NET
process(which is domainName\ASPNET), my impersonation is no use with Process.

Do anbody know how to execute a .exe file without using Process (Diagnostics).
with the current thread impersonated user?

Thanks
Avasi

 

[Guest]

You can set up impersonation in the ASP.NET app, if it is not a purely
anonymous access application. It sounds like that is your issue.

One easy way around this is to code for COM+ (Enterprise Services) and set a
particular user for the application. You then fire off the COM+ "server" and
have it call process, using a higher account than the anon account.

The only other easy option is to allow the ASPNET user to fire the process.
This could be a security hole.

--
Gregory A. Beamer
MVP; MCP: +I, SE, SD, DBA

***************************
Think Outside the Box!
***************************