Permissions to call LogonUser

[kellygreer1]

I have been troubleshooting writing a log file to a fileshare on
another machine.... and I can't seem to find my way past the "Double
Hop" issue. I seem have narrowed it down to a failure of the
LogonUser call. On Windows 2000 with IIS 5 and ASP.NET 2.0 the
LogonUser call returns 0. From a Windows Forms client I can get the
LogonUser call to work fine (returns 1).

So what allows me to call LogonUser? Is there something I need to do
in the web.config or machine.config? I already tried the change where
you give ASPNET account the right to "Act as part of the OS".

Any other ideas? Articles? I'd like to get this working under IIS 5 if
possible.

Kelly Greer
(e-mail address removed)
change nospam to yahoo

 

[bruce barker (sqlwork.com)]

you may need to revert to the process token, to allow impersonation.

RevertToSelf();

before calling logon

-- bruce (sqlwork.com)