Re: User credential management - system level vs. application level

On Apr 2, 12:36 pm, Tony Brown <Tony Br...@xxxxxxxxxxxxxxxxxxxxxxxxx>
wrote:
Hello,

We are currently using AutoAdminLogon in the registry to get logon to
windows XP embedded, we then launch our application with an entry in the Run
key.  We manage security to various features of our application with our own
set of user credentials.

Some users need to have system administration privileges, and other users
should not.

I am looking for advice related to two issues we are having with this
implementation.  
1. Switching Windows OS users is slow and causes our application to close
2. We end up with two sets of username/password credentials, one for the OS
and one for our application.

Ideally, we would like to manage logon credentials in one location, allow
quick user switching, and have the same UI application for each user.

All advice is appreciated,

Thank you,
Tony Brown

I'm not entirely sure how your application uses different rights, but
perhaps the CreateProcessWithLogonW function from advapi32.dll would
help. It is the programmatic equivalent of "Run As" in Explorer. We
use that in our systems for certain things. You just need to make sure
that you add the "RunAs Service" component to your image to use it.
.

Relevant Pages

  • Re: Problem with control hosted in IE
    ... The control is running on the client machine, so the default credentials are ... These will be the Windows logon from the ... > I logon to another machine using a local account (not one that the IIS ...
    (microsoft.public.dotnet.security)
  • Re: Does the ability to use cached logon expire?
    ... >> credentials, they need to log on to the Domain to reset it. ... > Microsoft Windows 2000 Security Hardening Guide ... > Disable Caching of Logon Information ... > how many user account entries Windows 2000 saves in the logon cache ...
    (microsoft.public.windowsxp.security_admin)
  • Re: 2003 Web Edition logon errors
    ... > succesfully logon to the machines. ... > users to logon with credentials from domain A. When selecting Domain C ... Unable to obtain Terminal Server User Configuration. ... > the windows 2000 boxes allow users to logon using credentials from ...
    (microsoft.public.win2000.advanced_server)
  • =?Utf-8?Q?User_credential_management_=E2=80=93_sys?= =?Utf-8?Q?tem_level_vs._application_lev
    ... windows XP embedded, we then launch our application with an entry in the Run ... Switching Windows OS users is slow and causes our application to close ... We end up with two sets of username/password credentials, ... Ideally, we would like to manage logon credentials in one location, allow ...
    (microsoft.public.windowsxp.embedded)
  • Re: How to force a logoff in a logon script?
    ... Windows has a registry key that governs which UI will be presented ... the unauthorized user cancels the logon dialog and goes away ... system, but complains that there was no cancel button, only an OK ...
    (microsoft.public.windows.server.scripting)