Questions tagged [impersonation]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2 votes
3 answers
10k views

Authenticated User Impersonation in Classic ASP under IIS7

I've recently moved one of our servers from Server 2003 and IIS6 to Server 2008 R2 and IIS7 (technically IIS7.5 I suppose). In doing so I am transitioning a small account management tool written in ...
10 votes
1 answer
4k views

Is it safe to set validateIntegratedModeConfiguration=false in order to continue using identity impersonate=true?

We have upgraded an ASP.NET web application from IIS6 to IIS7 integrated mode. Our application uses: <identity impersonate="true"/> and therefore we have had to set: <validation ...
18 votes
3 answers
14k views

Should I impersonate PHP via FastCGI?

I am installing the latest version of PHP onto IIS 7.5 via FastCGI, and all of the instructions say that FastCGI should impersonate the calling client by setting fastcgi.impersonate = 1 If my ...
2 votes
3 answers
2k views

How to prevent user from logon of an account used for impersonation only?

Currently I have a windows service written in C# (running as LocalSystem) which creates a user account, needed for impersonation, by using the DirectoryEntry to add the user/password and associated ...
-2 votes
2 answers
148 views

How to protect email addresses after domain name expires?

I'm thinking of creating a website for a friend. This includes registering a domain name and setting up a couple email addresses ([email protected], etc.) If the friend doesn't maintain the domain ...
20 votes
7 answers
72k views

Run as a different user without a password from an elevated prompt in Windows

There are a several utilities to run as a different user (eg: runas, cpau, psexec) but all of them require the password for the respective user, even if you are already running with elevated ...
2 votes
1 answer
4k views

IIS cannot serve images due to impersonation?

We have a brand new Windows2012R2 server. We have installed the IIS features on it (including static content). Then we have deployed a web site on it (using copy). When we surf to the web site, HTML, ...
0 votes
1 answer
929 views

Runas local Administrator, while authenticating as domain user

I am facing a peculiar setup, where I need to use local administrator on a windows machine. The instructions are as follows: Shift-right-click the cmd or Powershell shortcut Select "Run as ...
0 votes
1 answer
259 views

passing exe to non-admin user outside network to install software

I'm in a dead end now and need your help. I tried everything I could find on the web, but didn't succeed. I have hundreds of non-admin domain users working on their Windows 10 laptops outside our ...
0 votes
0 answers
164 views

Configure Windows Service user account based on Domain Controller check

We have a patching service which is a windows service that patches the non domain controller and domain controllers. Currently we were using same service account(account_abc) which has a Domain ...
1 vote
1 answer
2k views

Writing to eventlog from iis7 web application fails

I am trying to deploy a .NET web application who's security is done using impersonation. Writing to the eventlog works fine on my dev box (Win 2003 IIS6) but after putting the app on the live box (...
1 vote
1 answer
5k views

Allowing LocalSystem access to network folder

Background We have a windows service running under the LocalSystem account running on a server. We have a separate server holding attachments for our application that may contain PHI. Today this ...
2 votes
0 answers
287 views

ASP.NET application impersonate user with netonly to access network share

We have an ASP.NET application running on Server A which is on its own domain, in the web.config we are impersonating a user. Now this application needs to access a folder on Server B which is on a ...
0 votes
0 answers
173 views

Is there a way to turn off impersonation for ISAPI extensions?

Is there a way to configure IIS7 to use worker process identity instead of authenticated user when running ISAPI extension?
1 vote
1 answer
4k views

Execute Trigger as Login

Is it possible to impersonate a login when running a trigger? I able able to run execute as 'username' but not execute as login='username' I can usee execute as as such with EXECUTE AS login='smr' ...
0 votes
1 answer
490 views

IIS 6.0 on Windows Server 2003 setup for Integrated Windows Authentication but no direct access for users to the shared folders

I am attempting to set up an IIS 6.0 application running on Windows Server 2003 to use impersonation. Can anyone provide me with details of how this can be set up to work in conjunction with Windows ...
1 vote
1 answer
449 views

How to speed up applying impersonation rights changes?

I often add impersonation rights on various Windows Servers running Exchange Servers (2010, 2013) using PowerShell (New-ManagementRoleAssignment –Name:impersonationAssignmentName –Role:...
5 votes
5 answers
3k views

IIS Strategies for Accessing Secured Network Resources

Problem: A user connects to a service on a machine, such as an IIS web site or a SQL Server database. The site or the database need to gain access to network resources such as file shares (the most ...
0 votes
1 answer
979 views

Impersonation on IIS 7.0 passes the machine credentials for Crystal Reports

On a 32-bit Windows 2008 server running the Donor2 Application in the Classic .NET Managed Pipeline mode, configured for Windows Integrated Authentication and Impersonation, all of the .NET pages are ...
2 votes
2 answers
10k views

IIS7 + ASP.NET Impersonation + Windows Auth = 401 Unauthorized

I've got an asp.net app that relies on Request.LogonUserIdentity.Name to be populated with the username of the person logged onto the client machine. In IIS7 on the webserver, I've disabled Anonymous ...
0 votes
1 answer
614 views

How do jabber servers find each other and how do they proof the authority for the domain they handle?

Recently google chatback has been turned off, and I was searching for an alternative that allows visitors of my website to isntantly message me, without the need of having a login at facebook or ...
0 votes
1 answer
114 views

Exchange impersonation rights

I need an answer to the following quetsion: What rights are required for Exchange Impersonation? I know this is kind of vague, but I really need an answer...
3 votes
2 answers
7k views

Classic ASP Impersonation | Windows authentication | File Access Denied IIS 7

I have a classic ASP/VBScript website (landing page - default.asp) that writes the website user access (LOGON_USER) activity to a simple txt file via the Scripting.FileSystemObject. VBScript creates ...
1 vote
1 answer
3k views

Getting Impersonation working in Classic ASP app under IIS 7.5

What settings need to be in place in order to get impersonation working for a Classic ASP application running under IIS 7.5? I have it working perfectly on my test server (Windows Server 2008 R2), ...
0 votes
1 answer
90 views

Allowing Service To Authenticate As User

On Windows XP through 7, I have a service that needs to be able to launch sub-processes as other users. Executing runas would do the trick, but SYSTEM is not configured to use runas without a password ...
2 votes
3 answers
379 views

Disallow root to su on a user which is not listed in /etc/passwd

On Linux we authenticate users against AD. The AD users are not listed on /etc/passwd. We are about to deploy a NFS solution to mount some extra space for each group of users. If a user(A) with sudo ...
14 votes
2 answers
44k views

Which AD permission is required to allow impersonation of an account?

I have a Windows service account. I need to grant it permission to impersonate another account within a group on another trusted domain, without delegation. So effectively, my service account says '...
1 vote
1 answer
1k views

Why must user be logged in for impersonation to work?

My Windows Server 2008 server hosts an ASP.net application that uses impersonation. The application works as long as the user being impersonated remains logged on to the server. However, when the user ...