Which I assume means that the web server is impersonating my account's security permissions when I am calling ADSI. However, I have security audits turned on and it appears (in the event viewer) that the user making the requests is ANONYMOUS. What am I doing wrong? Why isn't my request have the security permissions of the account I logged in as?
Couple Other Notes:
1) I am running in Process.
2) My account does have permissions to create users.
3) I am on SP 4
Which I assume means that the web server is impersonating my account's security permissions when I am calling ADSI. However, I have security audits turned on and it appears (in the event viewer) that the user making the requests is ANONYMOUS. What am I doing wrong? Why isn't my request have the security permissions of the account I logged in as?
Couple Other Notes:
1) I am running in Process.
2) My account does have permissions to create users.
3) I am on SP 4
A:
Try setting the authentication to clear text, and disable ntlm. NTLM is actually working. The problem is that until Windows 2000 (NT5.0) releases with keberos technology included, you simply cannot impersonateacross servers. You can use NTLM if the servers you wish to impersonateacross reside on the same box. Clear text is the only way to impersonate across machines. In other words if the domain that you want to manipulate is not on the same box as the IIS they you have to use basic.
In this article, Robert Chartier shows how to use the System.DirectoryServices Class for some simple User and Group administration tasks with impersonation. [Read This Article][Top]
