
Signature
Get Secure! - www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights.
Hello;
That looks like it does what I need. However, it worries me a little because:
1) It uses unmanaged code.
2) It say sthe example will run on XP but not on 2000 (and I assume 2003)
because it is a security risk.
Is there any way to do this using just managed code and that is not
considered a security risk?
And if this is the only way, is there a url that explains what has to be
changed in the windows 2000/2003 security policy to allow this to run?
thanks - dave
> Hi
>
[quoted text clipped - 13 lines]
> Get Secure! - www.microsoft.com/security
> This posting is provided "AS IS" with no warranties, and confers no rights.
"Peter Huang" - 05 Nov 2004 03:06 GMT
Hi,
The logonuser will work fine on windows xp and later including 2003. To run
the logonuser on windows 2000 we need to give the user that that run the
logonuser the SE_TCB_NAME(in User Manager, this is the "Act as part of the
Operating System" right) If we give the common user the right, the common
user will have the "Act as part of the Operating System" right.
Another way is to use the runas service. We can start a new process which
use the runas.exe to start a new process under certain user account. A
common user can use the runas.exe to do the impersonate on windows 2000.
For how to use runas, you may try to run the runas in the commmand prompt
to see the help.
Best regards,
Peter Huang
Microsoft Online Partner Support

Signature
Get Secure! - www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights.
"Peter Huang" - 10 Nov 2004 09:40 GMT
Hi,
If you have any more concerns on it, please feel free to post here.
Best regards,
Peter Huang
Microsoft Online Partner Support

Signature
Get Secure! - www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights.