Re: Problem Printing using IWebBrowser2 from IWAM Account on Server 2003

Hi Scott,

The LoadUserProfile API will take an Handle object as input which represent
of the account's logon session token for which you'd like to load the user
profile.

BOOL LoadUserProfile(
HANDLE hToken,
LPPROFILEINFO lpProfileInfo
);

Also, we can get a Token object from the current running thread or process,
the following WIN32 api just provide such functionality:

BOOL OpenProcessToken(
HANDLE ProcessHandle,
DWORD DesiredAccess,
PHANDLE TokenHandle
);


bool OpenThreadToken(
DWORD dwDesiredAccess,
bool bImpersonate = false,
bool bOpenAsSelf = true,
SECURITY_IMPERSONATION_LEVEL sil = SecurityImpersonation
) throw(...);

Thus, we don't need to manually call logonUser API with cleartext
uesrname/password to establish a logon session/token

Thanks,

Steven Cheng
Microsoft Online Support

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)





--------------------
| From: "ScottLR" <ScottLR@xxxxxxxxxxxxxxxx>
| References: <OhGfBaVuFHA.1572@xxxxxxxxxxxxxxxxxxxx>
<JQeKPQeuFHA.580@xxxxxxxxxxxxxxxxxxxxx>
<#$SsNRhuFHA.2960@xxxxxxxxxxxxxxxxxxxx>
<4F37LuouFHA.3020@xxxxxxxxxxxxxxxxxxxxx>
| Subject: Re: Problem Printing using IWebBrowser2 from IWAM Account on
Server 2003
| Date: Fri, 16 Sep 2005 08:48:32 -0700
| Lines: 197
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
| X-RFC2646: Format=Flowed; Original
| Message-ID: <eo6MeYtuFHA.3388@xxxxxxxxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.dotnet.framework.aspnet.webcontrols
| NNTP-Posting-Host: adsl-63-201-229-153.dsl.snfc21.pacbell.net
63.201.229.153
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.dotnet.framework.aspnet.webcontrols:10864
| X-Tomcat-NG: microsoft.public.dotnet.framework.aspnet.webcontrols
|
| Steven,
|
| We do not see the printer selection dialog. However, the process stops.
We
| know the dialog displays because when performing a "run as" with a user
that
| has not logged on manually, the printer selection dialog displays.
|
| I am inclined to agree that running LoadUserProfile will solve the issue.
| How can I run this for the IWAM account if I do not know its password?
|
|
| Scott
|
| "Steven Cheng[MSFT]" <stcheng@xxxxxxxxxxxxxxxxxxxx> wrote in message
| news:4F37LuouFHA.3020@xxxxxxxxxxxxxxxxxxxxxxxx
| > Thanks for your response Scott,
| >
| > OK. So you've used a custom COM component in your asp page(not asp.net
| > yes?) and try printing in that component, and there'll always occur
| > printer
| > selection dialog if you haven't interactively logon through that service
| > account on the server yet ,yes?
| >
| > One thing I'm still confused is since the ASP's page processing thread
| > running in a daemon process belonging to a non displayable windows
| > station,
| > how could you see the Printer selection dialog? It's only possible for
us
| > to see such UI in application running interactively or in a visible
| > windows
| > station.
| >
| > Anyway, from the symptom of the issue, I think it's likely due to the
| > USERPROFILE of your IWAM(or other custom account) account. when we
| > interactively logon , the certain user/account's User Profile is loaded,
| > then the Printer selection dialog won't appear. You can try using the
| > LoadUserProfile win32 API to manually load the userProfile of your
| > process's account to see whether it helps.
| >
| > Thanks,
| >
| > Steven Cheng
| > Microsoft Online Support
| >
| > Get Secure! www.microsoft.com/security
| > (This posting is provided "AS IS", with no warranties, and confers no
| > rights.)
| >
| >
| > --------------------
| > | From: "ScottLR" <ScottLR@xxxxxxxxxxxxxxxx>
| > | References: <OhGfBaVuFHA.1572@xxxxxxxxxxxxxxxxxxxx>
| > <JQeKPQeuFHA.580@xxxxxxxxxxxxxxxxxxxxx>
| > | Subject: Re: Problem Printing using IWebBrowser2 from IWAM Account on
| > Server 2003
| > | Date: Thu, 15 Sep 2005 09:41:11 -0700
| > | Lines: 114
| > | X-Priority: 3
| > | X-MSMail-Priority: Normal
| > | X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
| > | X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
| > | X-RFC2646: Format=Flowed; Original
| > | Message-ID: <#$SsNRhuFHA.2960@xxxxxxxxxxxxxxxxxxxx>
| > | Newsgroups: microsoft.public.dotnet.framework.aspnet.webcontrols
| > | NNTP-Posting-Host: adsl-63-201-229-153.dsl.snfc21.pacbell.net
| > 63.201.229.153
| > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
| > | Xref: TK2MSFTNGXA01.phx.gbl
| > microsoft.public.dotnet.framework.aspnet.webcontrols:10848
| > | X-Tomcat-NG: microsoft.public.dotnet.framework.aspnet.webcontrols
| > |
| > | Steven,
| > |
| > | 1. It is running serverside through a com component in an ASP page.
| > |
| > | 2. Agreed.
| > |
| > | The issue can also be demonstrated as follows:
| > |
| > | 1. a new account is created on 2003 in the administrators group.
| > |
| > | 2. The administrator invokes cmd.exe using "run as" with the new
| > account.
| > |
| > | 3. The code will display the printer selection dialog and prints
| > | successfully.
| > |
| > | 4. The new account is used to log into 2003 server and logs out.
| > |
| > | 5. The administrator invokes cmd.exe using "run as" with the new
| > account.
| > |
| > | 6 The code will NOT display the printer selection dialog and prints
| > | successfully.
| > | --
| > |
| > | Thank you,
| > |
| > | Scott
| > | Software995 Support
| > |
| > | "Steven Cheng[MSFT]" <stcheng@xxxxxxxxxxxxxxxxxxxx> wrote in message
| > | news:JQeKPQeuFHA.580@xxxxxxxxxxxxxxxxxxxxxxxx
| > | > Hi Scott,
| > | >
| > | > Welcome to MSDN newsgroup.
| > | > From your description you're using some c++ unmanaged code to do
| > printing
| > | > work for a web page. Also, you got some problem when printing, since
| > | > there'll occur the print setting dialog sometimes.
| > | >
| > | > As for your problem, I'd like to confirm the following things:
| > | >
| > | > 1. Is your printing code running in a activex control or at
serverside
| > | > through COM component in asp page?
| > | >
| > | > 2. If running in ActiveX control, since Activex Control is rich
client
| > | > component which running at clientside, I think it won't care about
the
| > | > IWAM
| > | > account since IWAM account is a serverside account used to running
IIS
| > | > application.
| > | >
| > | > Please feel free to let me know if there're anything I
misunderstand.
| > | > Thanks,
| > | >
| > | > Steven Cheng
| > | > Microsoft Online Support
| > | >
| > | > Get Secure! www.microsoft.com/security
| > | > (This posting is provided "AS IS", with no warranties, and confers
no
| > | > rights.)
| > | >
| > | >
| > | >
| > | > --------------------
| > | > | From: "ScottLR" <ScottLR@xxxxxxxxxxxxxxxx>
| > | > | Subject: Problem Printing using IWebBrowser2 from IWAM Account on
| > Server
| > | > 2003
| > | > | Date: Wed, 14 Sep 2005 11:02:38 -0700
| > | > | Lines: 23
| > | > | X-Priority: 3
| > | > | X-MSMail-Priority: Normal
| > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
| > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
| > | > | X-RFC2646: Format=Flowed; Original
| > | > | Message-ID: <OhGfBaVuFHA.1572@xxxxxxxxxxxxxxxxxxxx>
| > | > | Newsgroups: microsoft.public.dotnet.framework.aspnet.webcontrols
| > | > | NNTP-Posting-Host: adsl-63-201-229-153.dsl.snfc21.pacbell.net
| > | > 63.201.229.153
| > | > | Path:
| > TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.phx.gbl
| > | > | Xref: TK2MSFTNGXA01.phx.gbl
| > | > microsoft.public.dotnet.framework.aspnet.webcontrols:10832
| > | > | X-Tomcat-NG: microsoft.public.dotnet.framework.aspnet.webcontrols
| > | > |
| > | > | The code below successfully invokes printing from an ASP page.
| > | > |
| > | > | If I run the code before a user manually logs in as the IWAM
| > account,
| > | > the
| > | > | printer selection dialog is unfortunately displayed. If I have
| > logged
| > | > into
| > | > | the IWAM account and logged out, then the printer selection dialog
| > does
| > | > not
| > | > | display.
| > | > |
| > | > | I do not want the printer selection dialog to display. Logging
into
| > the
| > | > IWAM
| > | > | account requires changing the account's password and is not an
| > | > acceptable
| > | > | solution. What must be done so that the printer selection dialog
is
| > | > | suppressed without requiring needing to log in as the IWAM
account?
| > | > |
| > | > | VARIANT parameter;
| > | > | VariantInit(&parameter);
| > | > | V_VT(&parameter) = VT_ARRAY | VT_BYREF;
| > | > | V_ARRAY(&parameter) = parameter_array;
| > | > |
| > | > | // start printing browser contents
| > | > |
| > | > | hr =
| > | > |
| > | >
| >
_Browser->ExecWB(OLECMDID_PRINT,OLECMDEXECOPT_DONTPROMPTUSER,&parameter,NULL
| > | > );
| > | > |
| > | > |
| > | > |
| > | >
| > |
| > |
| > |
| >
|
|
|

.

Relevant Pages

  • Re: Connecting to a network share not working in a Windows Service
    ... Good grief, not only did I write Windiows Wervice, but I cut'n'paste the ... The Correct API is "WNetAddConnection2" ... "The account name is invalid or does not exist, ... >> "A specified logon session does not exist. ...
    (microsoft.public.dotnet.general)
  • Re: Transaction Oriented Architecture (TOA)
    ... Given embedded SQL mapping an account /thing/ to the DB as: ... then the SQL is dependent on: an account table/view, its columns, and the explicit reference to accountKey. ... Procedure names and their arguments should be considered as an API to the DB's solution domain. ... this kind of interface is common among object oriented languages and isn't a foreign concept to OO programmers. ...
    (comp.object)
  • Re: Problem Printing using IWebBrowser2 from IWAM Account on Server 2003
    ... logon session of the ASP process account? ... LoadUserProfile first before calling the SetDefaultPrinter? ... | Subject: Re: Problem Printing using IWebBrowser2 from IWAM Account on ... |> component or just the code that your construct the WEBbrowser control, ...
    (microsoft.public.dotnet.framework.aspnet.webcontrols)
  • Re: Encapsulating and Securing Pre-canned ADSI calls
    ... The OS will protect the credentials ... You could also set up the process account to use a specific admin identity ... Your business logic security layer ... > 1) Have the API obtain credentials of the user with admin rights in AD, ...
    (microsoft.public.dotnet.security)
  • Re: Problem Printing using IWebBrowser2 from IWAM Account on Server 2003
    ... > |> account. ... I am successfully calling LoadUserProfile and then UnLoadUserProfile in the ... fails to suppress the printer selection dialog., even if I try it again ... > BOOL LoadUserProfile( ...
    (microsoft.public.dotnet.framework.aspnet.webcontrols)