#3 should work. Just run the site under a sufficient user account.
Why do you need impersonate?
Jeff
"lecnac" <nospam@company.com> wrote in message
news:OBu1S4%23ZGHA.4544@TK2MSFTNGP02.phx.gbl...[color=blue]
> Sorry for the repost. I must have done something wrong when I tried to
> post
> my reply (I can't seem to find it).
>
> Anyway, I'd really appreciate any help that anyone could provide. My
> issue
> is quickly becoming more and more urgent.
>
>
>
> Thanks for the thoughts Bruce. However, we can't do #1 (we must use
> Integrated Windows Authentication). And, can't do #2 (the server will be,
> for the most part, a stand-alone server just for our intranet
> application).
> And, we need impersonation = "true" in #3.
>
> So, any other thoughts/ideas?
>
> Anyone?
>
>
> I've tried the code below using the server's local Administrator user name
> and password. This gets me past the Access denied error but gives me a
> User
> credentials cannot be used for local connections error.
>
> ManagementScope ms;
> ManagementClass mc;
>
> ms = new ManagementScope();
> ms.Options.Username = "username";
> ms.Options.Password = "password";
> ms.Options.Authentication = Authentication.PacketPrivacy;
> ms.Path = new ManagementPath("//server/root/CIMv2");
>
> mc = new ManagementClass(ms, new ManagementPath("Win32_Share"), null);
>
>
> Maybe another thought... Should I not use WMI to try to get a list of
> shared folders on the server? Should I use something else? If so, what?
>
>
>
> "bruce barker (sqlwork.com)" <b_r_u_c_e_removeunderscores@sqlwork.com>
> wrote
> in message news:eUTaVNYZGHA.4144@TK2MSFTNGP04.phx.gbl...[color=green]
>> this setup won't work. the web service is running with a secondary[/color]
> credital,[color=green]
>> so it can not access a network resource (one hop rule). you have three
>> options
>>
>> 1) set the web site to basic authenication
>> 2) switch to activce directory and kerberos.
>> 3) remove <identity impersonate="true"/> and give the app pool an account
>> with network permissions.
>>
>> -- bruce (sqlwork.com)
>>
>> "lecnac" <nospam@company.com> wrote in message
>> news:%23gb5E%23XZGHA.1220@TK2MSFTNGP02.phx.gbl...[color=darkred]
>> > Here's some details:
>> >
>> > Server and workstation both in the same workgroup
>> > Logged into server as local Administrator
>> > Logged into workstation as a local user that is only in the Users group
>> > The local user on the workstation is also defined with same name and
>> > password on the server (and only in the Users group on the server)
>> > Server is Windows Server 2003 running IIS 6.0
>> > Workstation is Windows XP Professional
>> > ASP.NET 2.0 (C#) web site
>> >
>> >
>> > Web.config snippet
>> > <system.web>
>> > <authentication mode="Windows"/>
>> > <identity impersonate="true"/>
>> > </system.web>
>> >
>> >
>> > .aspx.cs snippet (from Page_Load event)
>> > using (System.Management.ManagementClass exportedShares = new
>> > System.Management.ManagementClass("Win32_Share"))
>> > {
>> > System.Management.ManagementObjectCollection shares =
>> > exportedShares.GetInstances();
>> >
>> > foreach (System.Management.ManagementObject share in shares)
>> > {
>> > // Get shared folder information, for example
>> > Response.Write("Name: " + share["Name"].ToString());
>> > }
>> > }
>> >
>> >
>> > Open IE and navigate to the web site on the server (using
>> >
http://servername/website). I get an access denied error. The[/color][/color]
> exception[color=green][color=darkred]
>> > is
>> > thrown on the line: System.Management.ManagementObjectCollection shares[/color][/color]
> =[color=green][color=darkred]
>> > exportedShares.GetInstances();. The exception details are:
>> > System.Management.ManagementException: Access denied
>> >
>> >
>> >
>> > What I'm trying to do is list all the shared folders on the server on a
>> > page. However, when I run this application from a different computer,
>> > I
>> > get
>> > the access denied error.
>> >
>> > ** How can I get a list of shared folders on the server no matter what
>> > computer is accessing the ASP.NET application?
>> > ** What do I need to do differently to get the above code and scenario[/color][/color]
> to[color=green][color=darkred]
>> > work?
>> >
>> > ** Is there a better way of doing this than WMI? If so, what?
>> >
>> >
>> > P.S., On the server, I tried give the local user full WMI permissions
>> > through Computer Management, and it didn't work (nothing changed; I[/color][/color]
> still[color=green][color=darkred]
>> > got the access denied error).
>> >
>> >
>> >[/color]
>>
>>[/color]
>
>
>[/color]
