Roy,

The app does run as a service, but it's basically a scheduling system -
will run jobs on various schedules. What I was trying to achieve was to
be able to run each job as a different user if required.

I need something that can be decrypted on any machine, and DPAPI is
either user or machine specific.

Dino

-----Original Message-----
From: Discussion of advanced .NET topics.
[mailto:[EMAIL PROTECTED] On Behalf Of Pardee, Roy
Sent: Wednesday, 10 October 2007 04:19
To: [email protected]
Subject: Re: [ADVANCED-DOTNET] Storing passwords securely - or can I do
something else?

If your app (or maybe a portion thereof) were run as a service, you
could specify the account under which the service runs.   Could that
work?

Apart from that, DPAPI is what comes to my mind.  Or maybe whatever goo
it is that encrypts config file sections for asp.net?

-----Original Message-----
From: Discussion of advanced .NET topics.
[mailto:[EMAIL PROTECTED] On Behalf Of Dean Cleaver
Sent: Monday, October 08, 2007 9:49 PM
To: [email protected]
Subject: [ADVANCED-DOTNET] Storing passwords securely - or can I do
something else?

As part of an automation system I've written, I'd like to be able to
specify the account that certain jobs are executed under - but to do so,
I presume I would need to store the username and password in the
database - something I'm not overly keen on even if the passwords are
encrypted. Given the flexible nature of the system, there's not a lot of
other choices left to me.

Or is there some other token I can store that I can use?

Dino

===================================
This list is hosted by DevelopMentor(r)  http://www.develop.com

View archives and manage your subscription(s) at
http://discuss.develop.com

===================================
This list is hosted by DevelopMentorĀ®  http://www.develop.com

View archives and manage your subscription(s) at http://discuss.develop.com

Reply via email to