Re: unable to execute a .exe command through Win32_Process on IIS.. Help

Me thinks you are seeing a delegation problem...

If the script works via command line, but not through a web page, the
credentials used to get to the webpage don't seem to be transferring to
the web process.

Two easy questions first...

1. Is the AD Computer account for the IIS box marked as "Trusted for
Delegation" (or something very similar)?
2. Are you using Windows Authentication (only) on your website?

Ok, with that being said:

I'm not a .NET person, but the following link should provide a working
example about midway-to-a-third of the way down.. it uses explicitly
defined password and user, but I am guessing you can forego that little
part and glean any differences between your code and their purported
working code (which uses delegation).

http://www.dotnet247.com/247reference/msgs/46/232493.aspx

I hope this helps.

Steven

.

Relevant Pages

  • Re: Impersonation/Delegation security considerations
    ... Our AD/network guys illustrated a potential security issue using the ... I assume that by delegation you mean passing ... only pass user's credentials to a SQL Server running on the same machine. ... Web site to the CEO ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Impersonation/Delegation security considerations
    ... security risk example. ... delegation you mean passing ... >only pass user's credentials to a SQL Server running on ... >Create a fake internal Web site. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Login failed for user . The user is not associated with a trusted SQL Server connection.
    ... he never mentioned he is impersonating in asp.net - so no delegation needed. ... Cassini runs with the credentials of the interactive user - which seems to have access to sql - in contrast to the local ASPNET account - which i am trying to tell him since 2 days.... ... yes - use explicit credentials and enable mixed mode auth in sql server to get this to work. ...
    (microsoft.public.dotnet.security)
  • Re: [modauthkerb] Negotiate on Windows with cross-realm trust ADand MIT Kereros.
    ... I need the KRB5CCNAME so I can login to my OpenLDAP SASL based server and PostgreSQL with kerberos. ... Storing credentials in a krb5 cache pointing to KRB5CCNAME has nothing to do with delegation. ... You only need delegation if you wnat that Apache logs into a backend application with the users ID. ... Now Search log events and configuration files using AJAX and a browser. ...
    (comp.protocols.kerberos)
  • Re: Remote process with network access
    ... You are missing a key concept, that is the transmission of credentials. ... Let's say you have 3 machines, WinMgmtClient, WinMgmtServer, FileServer. ... The second hop is guaranteed by Kerberos via Delegation. ...
    (microsoft.public.win32.programmer.wmi)