Impersonation problems

[Sharon]

Hi to all.
I have two Impersonation problems:

1. When using my app. from a remote computer,
the aspx page is unable to get information from Active Directory.
I am using Impersonation, and the Impersonated user is logged to the domain.
When I'm doing the same, logged as the same user, but on the server
computer,
it works.

2. When using Impersonation and setting the user name and password in the
web.config
file, the aspx page is able to access files on a file server.
But when user name and password are not in the web.config file,
and I am logged in as the same user, access is denied.

What am i missing here?
Thanks.
Sharon.

[bruce barker]

see >>

-- bruce (sqlwork.com)
"Sharon" <sh****@void.null> wrote in message
news:eB**************@TK2MSFTNGP15.phx.gbl...
| Hi to all.
| I have two Impersonation problems:
|
| 1. When using my app. from a remote computer,
| the aspx page is unable to get information from Active Directory.
| I am using Impersonation, and the Impersonated user is logged to the
domain.
| When I'm doing the same, logged as the same user, but on the server
| computer,
| it works.
|

unless you are using basic or kerboros, impersonated accounts cannot access network resources (1 hop rule). if you are on the iis box, it has a
primary token, and can do 1 hop. if you access from another box, you used up
1 hop getting to iis.

| 2. When using Impersonation and setting the user name and password in the
| web.config
| file, the aspx page is able to access files on a file server.
| But when user name and password are not in the web.config file,
| and I am logged in as the same user, access is denied.
|
same rules as above. if you fill in a domain username and password,

asp.net can access remote resources

| What am i missing here?
| Thanks.
| Sharon.
|
|
|

[Sharon]

Thanks Bruce.
I thought the problems are related.
So i need to forward the impersonated account to the file server / active
directory.
Do you know how it's done?
Sharon.

"bruce barker" <no***********@safeco.com> wrote in message
news:#k**************@TK2MSFTNGP10.phx.gbl...

see >>

-- bruce (sqlwork.com)
"Sharon" <sh****@void.null> wrote in message
news:eB**************@TK2MSFTNGP15.phx.gbl...
| Hi to all.
| I have two Impersonation problems:
|
| 1. When using my app. from a remote computer,
| the aspx page is unable to get information from Active Directory.
| I am using Impersonation, and the Impersonated user is logged to the
domain.
| When I'm doing the same, logged as the same user, but on the server
| computer,
| it works.
|

unless you are using basic or kerboros, impersonated accounts cannot access network resources (1 hop rule). if you are on the iis box, it has a
primary token, and can do 1 hop. if you access from another box, you used up 1 hop getting to iis.

| 2. When using Impersonation and setting the user name and password in the | web.config
| file, the aspx page is able to access files on a file server.
| But when user name and password are not in the web.config file,
| and I am logged in as the same user, access is denied.
|
same rules as above. if you fill in a domain username and password,

asp.net can access remote resources

| What am i missing here?
| Thanks.
| Sharon.
|
|
|