Azman: AzAuthorizationStoreClass.Initialize

I am calling AzAuthorizationStoreClass.Initialize
and i am getting an access denied. My app is an
asp.net and i am doing impersonation. The 'Initialize'
method works if i add the user acount doing the impersonation
to the admininistrator group on the local machine
but fails otherwise.

I dont want to have to make the account doing the
impersonation and admin of the box. What permissions
do i need to set in order for the method call to succeed
without being an admin of the box.


.

Relevant Pages

  • Interop.Secrurity.AzRoles
    ... The app i am running ... The ADAM breing accessed is setup on a 2003 Server. ... In addittion i am doing impersonation. ... impersonation and admin of the web application box. ...
    (microsoft.public.dotnet.security)
  • Re: Thread identity
    ... both approaches using impersonation will get you in trouble - ... when an attacker can take over the application - he is admin ... > The WindowsImpersonationContext starts and stops impersonation. ... > only other thing is getting the logon token for the administrator to ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Thread identity
    ... > Hello Joe, ... > both approaches using impersonation will get you in trouble - ... > when an attacker can take over the application - he is admin ... >> you can run the worker process as the administrator and undo the ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Programmatic Subsite Creation
    ... I working with a webpart and have I tried impersonation of the admin, ... I ended doing a work around by creating a site template for the top level ... > untighten your portal security trust level in web.config too. ...
    (microsoft.public.sharepoint.portalserver.development)
  • RE: Azman: AzAuthorizationStoreClass.Initialize
    ... AzMan does not require admin rights to initialize. ... Have you tried to allow the ASPNET local account to read your physical store? ... > asp.net and i am doing impersonation. ...
    (microsoft.public.windows.server.active_directory)