Have you taken a look at the asp.net security best practices paper? It
discusses some of the pitfalls and issues when using impersonation.
[url]http://www.microsoft.com/downloads/release.asp?ReleaseID=44047[/url]

-- Mary
MCW Technologies
[url]http://www.mcwtech.com[/url]

On Wed, 3 Sep 2003 06:14:48 -0400, "alexey" <alexey@intuitivelabs.com>
wrote:
>I am trying to impersonate in ASPNET application. I found a large number of
>samples that use interoper call to LogonUser. The problem is no one sample
>code really works. The main problem the error: 1314 A required privilege is
>not held by the client. ERROR_PRIVILEGE_NOT_HELD
>.
>And it is not recommended to give such provileges to the ASPNET user. Nobody
>tells how to bypass that.
>
> So how do I really resolve that problem?
>
>Thanks
>
>Alexey
>
>alexey@intuitivelabs.com
>