Web Service with Admin rights

[Sunil Virmani]

I want to create a web service that can create the users in the
Windows Domain. I am using ADSI for that. Using ADSI i am able to
create the users eaisly.

But when i incorporated the code in the web service i get the
unauthorized error.

How should i confiure the web service so that it can create the users
in the windows domain.


Rgds,
Sunil

[Manohar Kamath]

Sunil,

The so called "ASP.NET Webservices" are run under ASPNET account, which has
very few privileges. One way to get around this is to make the ASP.NET
worker process to run under an admin account. The following article should
help:

[url]http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpguide/html/cpconaspnetimpersonation.asp[/url]

--
Manohar Kamath
Editor, .netWire
[url]www.dotnetwire.com[/url]


"Sunil Virmani" <sun_hcl@rediffmail.com> wrote in message
news:e0989ba4.0503080827.5dda3c2c@posting.google.c om...

> I want to create a web service that can create the users in the
> Windows Domain. I am using ADSI for that. Using ADSI i am able to
> create the users eaisly.
>
> But when i incorporated the code in the web service i get the
> unauthorized error.
>
> How should i confiure the web service so that it can create the users
> in the windows domain.
>
>
> Rgds,
> Sunil

[Dan Rogers]

Um.... write an email to your boss right now, and tell him "fire me please".

Now seriously, granting admin rights to a program that runs under IIS is
considered the very worst of worst practices - thus the levity in the
statement above. You can do it, but you really don't want to.

--------------------

>From: [email]sun_hcl@rediffmail.com[/email] (Sunil Virmani)
>Newsgroups: microsoft.public.dotnet.framework.aspnet.webservic es
>Subject: Web Service with Admin rights
>Date: 8 Mar 2005 08:27:59 -0800
>Organization: [url]http://groups.google.com[/url]
>Lines: 13
>Message-ID: <e0989ba4.0503080827.5dda3c2c@posting.google.com >
>NNTP-Posting-Host: 203.200.70.152
>Content-Type: text/plain; charset=ISO-8859-1
>Content-Transfer-Encoding: 8bit
>X-Trace: posting.google.com 1110299280 16610 127.0.0.1 (8 Mar 2005

16:28:00 GMT)

>X-Complaints-To: [email]groups-abuse@google.com[/email]
>NNTP-Posting-Date: Tue, 8 Mar 2005 16:28:00 +0000 (UTC)
>Path:

TK2MSFTNGXA02.phx.gbl!cpmsftngxa10.phx.gbl!TK2MSFT FEED01.phx.gbl!TK2MSFTNGP0
8.phx.gbl!newsfeed00.sul.t-online.de!t-online.de!news-spur1.maxwell.syr.edu!
news.maxwell.syr.edu!postnews.google.com!not-for-mail

>Xref: TK2MSFTNGXA02.phx.gbl

microsoft.public.dotnet.framework.aspnet.webservic es:28495

>X-Tomcat-NG: microsoft.public.dotnet.framework.aspnet.webservic es
>
>I want to create a web service that can create the users in the
>Windows Domain. I am using ADSI for that. Using ADSI i am able to
>create the users eaisly.
>
>But when i incorporated the code in the web service i get the
>unauthorized error.
>
>How should i confiure the web service so that it can create the users
>in the windows domain.
>
>
>Rgds,
>Sunil
>