While testing an ASP.NET application that I developed, I encountered this bug: http://support.microsoft.com/kb/824308/EN-US/
So my thought was to have the installer programmatically add the Impersonate Privilege to the IWAM user when needed. I used the LsaAddAccountRights function to add the right. Here is my problem: the LsaAddAccountRights function always succeeds, but the right is only granted if I have first checked the "Define these policy settings" check box for the 'Impersonate a client after authentication' privilege. By default it is not checked. I cannot find a way to programmatically check that check box. It seems like this would be a pretty common problem faced by ASP.NET developers who use impersonation. Does anybody know how to solve this? Thanks, Russ =================================== This list is hosted by DevelopMentor� http://www.develop.com Some .NET courses you may be interested in: Essential .NET: building applications and components with C# November 29 - December 3, in Los Angeles http://www.develop.com/courses/edotnet View archives and manage your subscription(s) at http://discuss.develop.com
