we are running a .NET web service which uses Kerberos delegation to
access a backend service on behalf of the client's security context.
We have no problem with .NET client applications or IE accessing the web
service, but in case of a Java app acting as client, delegation fails.

Recently, after running virus and spyware removal programs, I have lost
access to my hard drive (C:/) - not showing in windows explorer, control
panel, and display properties from desktop.  I have tried to unhide folders
to no avail.  Computer seems to be functioning normal ...

Should not the Primarylogonscript for the domain users be place in the Domain
Policy and not just at the root of the Domain in Active Directory Tree?  
Also, doesn't the log on script go in the DC's Sysvol\domain\script folder -
why would it be in a Security Descriptor folder?  

Can I set restrictions on my user account ( I am senior systems admin and
domain and schema admin and exchange administrator of our corporation) so
that no one, not even another domain admin can disable my account?  
Can this be done with ADSI.edit?

(I am not sure I am posting this to the right group - if not, please advise
on a better group to use...)
I am looking for a way to allow end-users to use Single Sign-on to log in to
a hosted web-based application, i.e. using their normal windows UID/PWD - or

Hi I'm using the code from this url
http://www.pinvoke.net/default.aspx/ntdsapi/DsCrackNames.html?diff=y
My code:
               NamesCracked = DSAPI.DSAPI.HandleDsCrackNames(hds,

I am extracting a pkcs7-signature part from a s/mime message. When I
verifiy the signature I get a CryptographicException "The hash value is
not correct" .
I am using CheckSignature(true), therefore it should verify signature

I have a C++ project that splits into three parts. A desktop program (medium
integrity), a service application (SYSTEM account), and an asynchronous
pluggable protocol (low integrity).
The desktop program contains a named pipe server, created in the following

This domain could be in my current forest or in a foreign forst.  The
DirectoryContext requires domain name but I only have the domain side. How
can I do this in .net 2, vs2005, using C# for a windows applicaiton?  Thank
you.

I'm trying do FTP over SSL and am running into a problem on the data
connection (control connection is working fine).
When logging in I first issue the AUTH TLS command on non-SSL
connection, then create a new SslStream, and use that to