Re: Remote system access
From: Arkady Frenkel (arkadyf_at_hotmailxdotx.com)
Date: 08/24/04
- Next message: Big Mean Ogre: "Re: File and print sharing is missing"
- Previous message: Innokentiy Ivanov: "WSAENOBUFS error with 'recv'"
- In reply to: Lisa L: "RE: Remote system access"
- Next in thread: Lisa L: "Re: Remote system access"
- Reply: Lisa L: "Re: Remote system access"
- Messages sorted by: [ date ] [ thread ]
Date: Tue, 24 Aug 2004 16:29:02 +0300
Maybe post it on microsoft.public.win32.programmer.kernel NG
Arkady
"Lisa L" <LisaL@discussions.microsoft.com> wrote in message
news:CAFF3D79-1D65-424A-85B4-05497D791105@microsoft.com...
> Anyone have any insight?
> Anyone recomment I ask this question in another group?
> If so, which one?
>
> Lisa
>
> "Lisa L" wrote:
>
> > I have a process running as SYSTEM as a WNT SErvice (managable in the
Control
> > panel services applet).
> >
> > That Service at some point does a LogonUser and ImpersonateLoggedOnUser
to
> > connect to DC as a specific user with the permissions to do the things
it
> > needs to do. We have made it configuration option on whether that
logonUser
> > call is done with the LOGON32_LOGON_SERVICE or LOGON32_LOGON_INTERACTIVE
> > logontype. This presumes that the user specified for the logon as the
right
> > to log on as a service, if the SERVICE logon type is selected.
> >
> > Anyway, while logged on either as a SERVICE or INTERACTIVELY as user to
> > another DC, the process does the following call.
> >
> > NET_API_STATUS retVal = DsGetDcName(ComputerName, Domain, NULL, NULL,
> > (DS_RETURN_FLAT_NAME | DS_WRITABLE_REQUIRED), (PDOMAIN_CONTROLLER_INFOW
> > *)&domain_info);
> >
> > The "ComputerName" argument is the name of another system on the
network.
> > (Not the DC or the domain that the user was logged onto, no the system
where
> > this process is running on a SERVICE. It is some box in the network,
perhaps
> > were a client that initated a connection to the SERVICE.
> >
> > Does the user that was specified for the LOGON USER call need any
special
> > permissions or rights for the DsGetDcName to successfully be executed by
the
> > remote system and return to the calling process a Domain Controller
name?
> >
> > Does it make a difference in doing this DsGetDcName call, whether the
> > LogonUser logs on interactively or as a service?
> >
> > Lisa L
- Next message: Big Mean Ogre: "Re: File and print sharing is missing"
- Previous message: Innokentiy Ivanov: "WSAENOBUFS error with 'recv'"
- In reply to: Lisa L: "RE: Remote system access"
- Next in thread: Lisa L: "Re: Remote system access"
- Reply: Lisa L: "Re: Remote system access"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
