I need to get all the AD information from a user that access a intranet
ASP.NET page.Does anyone can tell me how to do it? (the user can't put its
login and password on a text box and validate it, I've got to get it by
code)

Is there a way I can get the user of the identity I will be
impersonating to get network resources?
I know WindowsIdentity.GetCurrent().Name for the person coming into
the ASP.NET app but I want to do some testing of different

Has anyone used the DPAPI to store database encryption keys and other
data in a load balanced environment? Would multiple web servers be
able to decrypt data if they were originally encrypted by another web
server?

We have a Web Service written in C# that accesses an ATL service via DCOM.
This all works great when both are on the same machine.
When I move to a two server scenario, I get an Access Denied error.
What is interesting is that I am able to get the Class Factory and then

I've established an SSL (with selfSSL) certificate for my IIS ver. 5.
an
i want my webservice client to connect to webservice through ss
(i've done all the things considered in MSDN - http://msdn.microsoft.com/library/en-us/dnnetsec/html/SecNetHT14.asp

My web.config settings are being ignored.
I have check IIS and the application is presiding in my root directory.
There are no other web.config files on the box.
When I move the application to another server, everything works fine.

I have an individual PKCS#12 file.  Can I use it to sign assemblies
instead of using "sn -k" ?
Thanks.

The situation is that I have a virtual site (created from IIS) where all
domain users can access via the intranet. However, there are a few pages
that we would like to restrict user access. I tried to use NTFS settings to
allow a certain people to access the .aspx pages, however, it ...

The following web server security checklist:
http://msdn.microsoft.com/library/en-us/dnnetsec/html/CL_SecWebs.asp?frame=true&_r=1
mentions "Parent paths" setting is disabled.
Where can i disable "Parent paths"?

I know you can screen scrape a website using the System.Net.HttpWebResponse
& System.Net.HttpWebRequest classes.
But how do you screen scrape a secured website (https) that takes a username
& password, I guess what I am asking where does the username & password

Is there a tool that tells me what permissions my assembly requires?
I have add [assembly: PermissionSet(SecurityAction.RequestOptional,
Unrestricted=false)] to deny all permissions I just want to now grant one I
require?

Applies to:  W2K3 Server / IIS6 / Default Isolation Mode / ASP.NET 1.1
We wish to run our ASPNET worker process in a domain account so as to use
RDBMS trusted connections.
We have created a domain account for this purpose.

When user try to debug an Asp Web application, He got error "Unable to start debugging on the web server. Access is denied.
The IIS server installed locally on the pc with Wondows XP. Administrator that try to debug on that same pc does not have any problems, Only simple user that ...

I decorated my assembly with the stuff below, but the compiler
complains "An attribute argument must be a constant expression, typeof
expression or array creation expression".
I want my assembly to obey CAS and only read and write to its own

I have searched and searched and searched for direction with this subject.
Basically, I would like to use our local Windows 20003 IAS Server to
authenticate my web clients.  However, I can't, for the life of me, find
anyway to do this or any direction of what I need in order to do ...