Can someone please describe why impersonation requires the impersonator to
be local admin?

We don't want or expect our users to make the decision as to whether or not
to allow our program to run.
I would like to set-up an internal certificate authority so we can sign our
own applications to run with full trust.

To add a new permission set into the CAS through caspol we have to
specify a XML file.
surprisingly I can't find anywhere not even on MSDN, the format of this
XML file. Can anybody forward me any link which explains the XML file

I have some questions about persistent and session cookie handling that I
can't quite get ironed out.
I have two applications. One is Framework 1.1, W2K3 / IIS6, the other is
2.0, W2K3 / IIS6. For both, HTTPS / SSL is enabled, but not forced, because

I have a web service which uses WSE for signing, and SSL for confidentiality
and authentication.
Authentication is via client certificates.
The above scenario is already implemented and cannot be changed.

I have an application that requires a user name and password so no one
sits down at anyone else's desk and runs the application as that user.
I don't want to create a database to store user names and passwords.
All I want to do is prompt the user for their Windows user name and

I want to pass a string password in System.Diagnostics.Process.Start.
The problem is that the defined password parameter is SecureString not
string while my password is string.
Normal casting evaluates to errors.

We (the software company I work for) have been using a desktop.ini file
to (1) create a unique icon for the "library folders" used with our
application and (2) to associate these folders with our application so
that double-clicking on the folder launches our application and lets

I have VS 2003 on my laptop and want to keep it, but I need to do a
re-install on my laptop of windows XP, I have registered the software but can
no longer find the CD because I moved to another state in June.  I need to
re-install windows xp because my computer is running slower ...

I'm looking for information on how to programmatically validate a
client certificate.
I found this article http://support.microsoft.com/kb/315588/ but it
stops short in describing how to actually validate the cert.

I have similar problem to this thread (and I want the same thing - I
wanted to check the user role of a given user name)
->
http://groups.google.com/group/microsoft.public.dotnet.security/browse_thread/th
read/645bf9a51c53c2fc/e237ffaf0ed88c0d

Hi my webserver is running .Net 1.1 and intermitently i get the
following error. Does anyone out there have any idea why this happens?
And how i can try and start solving the problem. Most of the time the
website works okay. Thanks in advance!

I'm using c# to created a OU folder and named it "Isolate" in windows setting.
DirectoryEntry newEntry = de.Children.Add("ou=Isolate", "organizationalUnit");
                               newEntry.CommitChanges();
My question is how do I move computer accounts from domain to this ...

Does anyone have any recommendations for a third parties PGP API for use in
.net?  I am specifically looking to encrypt files that get sent to a bank.
Thanks
Al

I am using framework 1.1
I try to add 2 security atributes to a component class but not able to do it
based on syntax mistake that I could not find out. Applying one atribute is
ok but more is a trouble...