Ask a Question related to ASP.NET Security, Design and Development.
-
WJ #1
WindowsIdentity ?
Is there a way to modify WindowsIdentity.Name for System.Security.Principal
class at runtime after your app. successfully logs the user on the system
programmatically.
Thanks
John
WJ Guest
-
Access Denied on WindowsIdentity.GetCurrent()
Hi, I am developing an ASP.NET Application in C#. I need to find out the user under which the process is running on runtime. So I use... -
Impersonation using WindowsIdentity( upn ) ctor
I'm trying to impersonate a user using the WindowsIdentity ctor. This is what I'm doing WindowsIdentity id = new WindowsIdentity(... -
Access is denied in WindowsIdentity.GetCurrent
I am suddenly getting this on a couple of Windows XP (.NET 1.1) machines in my environment. The machines haven't change, and my code hasn't... -
Extract NetworkCredential from WindowsIdentity
I'm using the Windows Integrated Authentication scheme for my web apps and web services. When my web applications make calls to the web services I... -
get WindowsIdentity with forms authentication
Hi, I am trying to figure out a way to authenticate against Active Directory and retrieve system.security.principal.WindowsIdentity object,... -
Paul Glavich [MVP - ASP.NET] #2
Re: WindowsIdentity ?
Most ASP.NET applications (with the default policy) are not allowed to
modify the Principal. You can change this behaviour by going to the .Net
Framework 1.1 configuration (Administrative Tools), and selecting the
'Security' permission set for the internet zone. Within this, (by default),
the 'Allow Pincipal Control' is set to 'No'. Changing this to yes means your
ASP.NET app has the ability to now change the security principal, but
obviously this increases the 'surface area' of attack for any potential
malicous users to hack into your system.
--
- Paul Glavich
Microsoft MVP - ASP.NET
"WJ" <JWebb@Msn2.Com> wrote in message
news:e7xy3fBIEHA.2924@TK2MSFTNGP09.phx.gbl...System.Security.Principal> Is there a way to modify WindowsIdentity.Name for> class at runtime after your app. successfully logs the user on the system
> programmatically.
>
> Thanks
>
> John
>
>
Paul Glavich [MVP - ASP.NET] Guest
-
-
Paul Wang #4
Re: WindowsIdentity ?
But it is read-only.
How can i change 'Allow Pincipal Control' to yes
thanks
Paul Wang Guest



Reply With Quote

