Re: impersonate a user to access the encryptd file

From: Paul Clement (UseAdddressAtEndofMessage_at_swspectrum.com)
Date: 07/27/04


Date: Tue, 27 Jul 2004 11:12:03 -0500

On Mon, 26 Jul 2004 19:08:02 -0700, "akuma" <akuma@discussions.microsoft.com> wrote:

¤ > Where is the file located and if it's a local file why do you need impersonation?
¤
¤ The files are located at the local computer. The reason of using impersonation is to reduce the time on swithing between users or it can let my program gain access the efs without need to log on as the other user or "Run as" the other user. Please help me to solve the problem, I have seached several days on the web but still can't get the solution to solve this. I had add the necessary privilege from the Group Polices Editior to my program run. However, it just solve the problem generate from CreateProcessAsUser API, it can't gain the access of the EFS. The Impersonation is the function that I want, but I don't know how to use this to access the EFS. There is other relavant function such as OpenProcessToken or AdjustTokenPrivileges. Are them needed to gain access to EFS? If yes, how to do that, otherwise, what is the require method? Please tell me or give some examples of this, any examples for C/C++ are also welcome.

Have you looked at the following MS KB article:

How To Start a Process as Another User from Visual Basic
http://support.microsoft.com/default.aspx?scid=kb;en-us;285879

Paul ~~~ pclement@ameritech.net
Microsoft MVP (Visual Basic)



Relevant Pages

  • Re: ASPNET cant write in event log on win XP
    ... I solve my problem using impersonation in web.config like this... ... You weren't using Anonymous authentication w/impersonation when it wasn't ... Microsoft MVP ...
    (microsoft.public.dotnet.framework)
  • Re: Problem IE6: Accessing the resource <local file> has been disallowed
    ... Sandi - Microsoft MVP since 1999 ... "Richard Rosenberger" wrote in message ... > If i open a local HTML file i get the error> "Accessing the resource <local file> has been disallowed"> I am running IE 6, ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Change file summary (title, author, etc.)
    ... Patrice and Paul. ... How did you implement impersonation? ... the authenticated user (via Integrated Windows or Basic auth)? ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: special authentication
    ... "Paul Clement" wrote in message ... > In addition to what Joe mentioned you also need to enable impersonation. ... All he wants to do is check to see who the authenticated user is. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: integrated login and folder permissions
    ... Hello Paul, ... i am saying that impersonation does not make a difference, because the FileAuthorizationModule ... always uses the impersonation (=client) token to check for resource access. ...
    (microsoft.public.dotnet.framework.aspnet.security)