Re: Remote process with network access

From: Gerry Hickman (gerry666uk_at_yahoo.co.uk)
Date: 09/05/04 

Date: Sun, 05 Sep 2004 01:50:48 +0100

chris delaney wrote:

> the way i look at it, if i can provide a userid/pwd that is valid for the
> machine, i should be able to initiate a process on that machine to run code
> installed on that machine and it should all the rights as if i ran it
> interactively.

No, because when you run "interactively", you are not using
impersonation. You are logged into the actual machine - not connecting
via WMI.

If you connect via WMI, you've already used up your first hop, so you
can't then make a second hop to a file server.

Of course you can always supply the plain text user name and password,
but that in itself is a security problem because you'd have to store the
password somewhere - either in you batch file, or a CMD param to a
scheduled job. 

-- 
Gerry Hickman (London UK)

Relevant Pages
Loading