The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
12 views

Is there a way to turn off impersonation for ISAPI extensions?

Is there a way to configure IIS7 to use worker process identity instead of authenticated user when running ISAPI extension?
0
votes
0answers
19 views

How can I utilise resource based delegation

Windows 2012 comes with an extension to the existing Kerberos Constrained Delegation, called resource based delegation (RBCD). There are a number of great articles that explain how it works for ...
0
votes
0answers
27 views

Do kerberos constrained delegation with protocol transition on IIS to another IIS need my own application for very simple redirect

Please excuse me if its a very basic question but i'm totally lost on this as Im new to IIS and kerberos delegation but have understanding of auth protocols. Need you peoples help please as i have ...
0
votes
1answer
29 views

Execute Trigger as Login

Is it possible to impersonate a login when running a trigger? I able able to run execute as 'username' but not execute as login='username' I can usee execute as as such with EXECUTE AS login='smr' ...
0
votes
0answers
89 views

Overridden ASPNet.config does not apply for legacyImpersonationPolicy

I tried to override the <legacyImpersonationPolicy> Element, so a single application, will enable this policy (which is necessary, since this application breaks if disabled). So my ...
0
votes
1answer
59 views

IIS 6.0 on Windows Server 2003 setup for Integrated Windows Authentication but no direct access for users to the shared folders

I am attempting to set up an IIS 6.0 application running on Windows Server 2003 to use impersonation. Can anyone provide me with details of how this can be set up to work in conjunction with Windows ...
1
vote
1answer
126 views

How to speed up applying impersonation rights changes?

I often add impersonation rights on various Windows Servers running Exchange Servers (2010, 2013) using PowerShell (New-ManagementRoleAssignment –Name:impersonationAssignmentName ...
0
votes
1answer
151 views

How do jabber servers find each other and how do they proof the authority for the domain they handle?

Recently google chatback has been turned off, and I was searching for an alternative that allows visitors of my website to isntantly message me, without the need of having a login at facebook or ...
0
votes
1answer
93 views

Exchange impersonation rights

I need an answer to the following quetsion: What rights are required for Exchange Impersonation? I know this is kind of vague, but I really need an answer...
6
votes
1answer
764 views

Is it safe to set validateIntegratedModeConfiguration=false in order to continue using identity impersonate=true?

We have upgraded an ASP.NET web application from IIS6 to IIS7 integrated mode. Our application uses: <identity impersonate="true"/> and therefore we have had to set: <validation ...
3
votes
2answers
3k views

Classic ASP Impersonation | Windows authentication | File Access Denied IIS 7

I have a classic ASP/VBScript website (landing page - default.asp) that writes the website user access (LOGON_USER) activity to a simple txt file via the Scripting.FileSystemObject. VBScript creates ...
11
votes
2answers
3k views

Should I impersonate PHP via FastCGI?

I am installing the latest version of PHP onto IIS 7.5 via FastCGI, and all of the instructions say that FastCGI should impersonate the calling client by setting fastcgi.impersonate = 1 If my ...
2
votes
2answers
5k views

IIS7 + ASP.NET Impersonation + Windows Auth = 401 Unauthorized

I've got an asp.net app that relies on Request.LogonUserIdentity.Name to be populated with the username of the person logged onto the client machine. In IIS7 on the webserver, I've disabled Anonymous ...
2
votes
1answer
382 views

How to prevent user from logon of an account used for impersonation only?

Currently I have a windows service written in C# (running as LocalSystem) which creates a user account, needed for impersonation, by using the DirectoryEntry to add the user/password and associated ...
1
vote
1answer
2k views

Getting Impersonation working in Classic ASP app under IIS 7.5

What settings need to be in place in order to get impersonation working for a Classic ASP application running under IIS 7.5? I have it working perfectly on my test server (Windows Server 2008 R2), ...
2
votes
3answers
202 views

Disallow root to su on a user which is not listed in /etc/passwd

On Linux we authenticate users against AD. The AD users are not listed on /etc/passwd. We are about to deploy a NFS solution to mount some extra space for each group of users. If a user(A) with sudo ...
0
votes
1answer
71 views

Allowing Service To Authenticate As User

On Windows XP through 7, I have a service that needs to be able to launch sub-processes as other users. Executing runas would do the trick, but SYSTEM is not configured to use runas without a password ...
7
votes
2answers
4k views

Which AD permission is required to allow impersonation of an account?

I have a Windows service account. I need to grant it permission to impersonate another account within a group on another trusted domain, without delegation. So effectively, my service account says ...
1
vote
3answers
4k views

Authenticated User Impersonation in Classic ASP under IIS7

I've recently moved one of our servers from Server 2003 and IIS6 to Server 2008 R2 and IIS7 (technically IIS7.5 I suppose). In doing so I am transitioning a small account management tool written in ...
1
vote
1answer
677 views

Why must user be logged in for impersonation to work?

My Windows Server 2008 server hosts an ASP.net application that uses impersonation. The application works as long as the user being impersonated remains logged on to the server. However, when the user ...
5
votes
5answers
2k views

IIS Strategies for Accessing Secured Network Resources

Problem: A user connects to a service on a machine, such as an IIS web site or a SQL Server database. The site or the database need to gain access to network resources such as file shares (the most ...
0
votes
1answer
804 views

Impersonation on IIS 7.0 passes the machine credentials for Crystal Reports

On a 32-bit Windows 2008 server running the Donor2 Application in the Classic .NET Managed Pipeline mode, configured for Windows Integrated Authentication and Impersonation, all of the .NET pages are ...
1
vote
1answer
2k views

Writing to eventlog from iis7 web application fails

I am trying to deploy a .NET web application who's security is done using impersonation. Writing to the eventlog works fine on my dev box (Win 2003 IIS6) but after putting the app on the live box ...