Impersonate

[Ian Frawley]

Anyone used the WindowsIdentity class with success? I find if I try to change the current identity to one that exists on another machine and then try to perform and action on that machine i.e. restart a service or list the available processes I keep getting access denied exceptions. Here is an example of my code:

[DllImport("adva pi32.dll", SetLastError=tr ue)]
public extern static bool LogonUser(Strin g lpszUsername, String lpszDomain,
String lpszPassword, int dwLogonType,
int dwLogonProvider , ref IntPtr phToken);

[STAThread]
static void Main(string[] args)
{
IntPtr UserToken = new IntPtr(0);

//int UserToken;
bool loggedOn;

try
{
loggedOn = LogonUser(
"Administrator" ,
Dns.GetHostName (),
"",3,0, ref UserToken);
}
catch(Exception ex)
{
throw ex;
}

if(loggedOn)
{
WindowsIdentity SystemMonitorUs er = new WindowsIdentity (UserToken);
WindowsImperson ationContext ImpersonatedUse r = SystemMonitorUs er.Impersonate( );
Console.WriteLi ne(SystemMonito rUser.Name);

try
{
Process[] _process;

_process = Process.GetProc esses("192.168. 6.236");

foreach (Process p in _process)
{
Console.WriteLi ne(p.ProcessNam e.ToString());
}
}
catch (Exception ex)
{
Console.WriteLi ne(ex.Message);
throw ex;
}

ImpersonatedUse r.Undo();
}

}

Ian
--
"Life should NOT be a journey to the grave
with the intention of arriving safely in an
attractive and well preserved body,
but rather to skid in sideways,
chocolate in one hand, beer in the other,
body thoroughly used up,
totally worn out and screaming
WOO HOO what a ride!"

[Nicholas Paldino [.NET/C# MVP]]

Ian,

This might be a foolish question, but does the user account on the
machine you are running the code on have rights to impersonate a user on the
other machine? My guess is that it doesn't.

--
- Nicholas Paldino [.NET/C# MVP]
- mv*@spam.guard. caspershouse.co m

"Ian Frawley" <ch****@away.co m> wrote in message
news:QK******** ****@news-1.opaltelecom.n et...
Anyone used the WindowsIdentity class with success? I find if I try to
change the current identity to one that exists on another machine and then
try to perform and action on that machine i.e. restart a service or list the
available processes I keep getting access denied exceptions. Here is an
example of my code:

[DllImport("adva pi32.dll", SetLastError=tr ue)]
public extern static bool LogonUser(Strin g lpszUsername, String
lpszDomain,
String lpszPassword, int dwLogonType,
int dwLogonProvider , ref IntPtr phToken);
[STAThread]
static void Main(string[] args)
{
IntPtr UserToken = new IntPtr(0);
//int UserToken;
bool loggedOn;
try
{
loggedOn = LogonUser(
"Administrator" ,
Dns.GetHostName (),
"",3,0, ref UserToken);
}
catch(Exception ex)
{
throw ex;
}

if(loggedOn)
{
WindowsIdentity SystemMonitorUs er = new WindowsIdentity (UserToken);
WindowsImperson ationContext ImpersonatedUse r =
SystemMonitorUs er.Impersonate( );
Console.WriteLi ne(SystemMonito rUser.Name);

try
{
Process[] _process;

_process = Process.GetProc esses("192.168. 6.236");
foreach (Process p in _process)
{
Console.WriteLi ne(p.ProcessNam e.ToString());
}
}
catch (Exception ex)
{
Console.WriteLi ne(ex.Message);
throw ex;
}
ImpersonatedUse r.Undo();
}
}
Ian

--
"Life should NOT be a journey to the grave
with the intention of arriving safely in an
attractive and well preserved body,
but rather to skid in sideways,
chocolate in one hand, beer in the other,
body thoroughly used up,
totally worn out and screaming
WOO HOO what a ride!"

[Ian Frawley]

Does the WindowsIdentity class require the current user to have these
rights?
"Nicholas Paldino [.NET/C# MVP]" <mv*@spam.guard .caspershouse.c om> wrote in
message news:%2******** ********@TK2MSF TNGP09.phx.gbl. ..

Ian,

This might be a foolish question, but does the user account on the
machine you are running the code on have rights to impersonate a user on the other machine? My guess is that it doesn't.

--
- Nicholas Paldino [.NET/C# MVP]
- mv*@spam.guard. caspershouse.co m

"Ian Frawley" <ch****@away.co m> wrote in message
news:QK******** ****@news-1.opaltelecom.n et...
Anyone used the WindowsIdentity class with success? I find if I try to
change the current identity to one that exists on another machine and then
try to perform and action on that machine i.e. restart a service or list the available processes I keep getting access denied exceptions. Here is an
example of my code:

[DllImport("adva pi32.dll", SetLastError=tr ue)]
public extern static bool LogonUser(Strin g lpszUsername, String
lpszDomain,
String lpszPassword, int dwLogonType,
int dwLogonProvider , ref IntPtr phToken);
[STAThread]
static void Main(string[] args)
{
IntPtr UserToken = new IntPtr(0);
//int UserToken;
bool loggedOn;
try
{
loggedOn = LogonUser(
"Administrator" ,
Dns.GetHostName (),
"",3,0, ref UserToken);
}
catch(Exception ex)
{
throw ex;
}

if(loggedOn)
{
WindowsIdentity SystemMonitorUs er = new WindowsIdentity (UserToken);
WindowsImperson ationContext ImpersonatedUse r =
SystemMonitorUs er.Impersonate( );
Console.WriteLi ne(SystemMonito rUser.Name);

try
{
Process[] _process;

_process = Process.GetProc esses("192.168. 6.236");
foreach (Process p in _process)
{
Console.WriteLi ne(p.ProcessNam e.ToString());
}
}
catch (Exception ex)
{
Console.WriteLi ne(ex.Message);
throw ex;
}
ImpersonatedUse r.Undo();
}
}
Ian

--
"Life should NOT be a journey to the grave
with the intention of arriving safely in an
attractive and well preserved body,
but rather to skid in sideways,
chocolate in one hand, beer in the other,
body thoroughly used up,
totally worn out and screaming
WOO HOO what a ride!"

[Nicholas Paldino [.NET/C# MVP]]

Ian,

Absolutely. How secure would an OS be if anyone could impersonate
anyone else? =)

--
- Nicholas Paldino [.NET/C# MVP]
- mv*@spam.guard. caspershouse.co m

"Ian Frawley" <ch****@away.co m> wrote in message
news:92******** ****@news-1.opaltelecom.n et...

Does the WindowsIdentity class require the current user to have these
rights?
"Nicholas Paldino [.NET/C# MVP]" <mv*@spam.guard .caspershouse.c om> wrote
in
message news:%2******** ********@TK2MSF TNGP09.phx.gbl. ..

Ian,

This might be a foolish question, but does the user account on the
machine you are running the code on have rights to impersonate a user on

the

other machine? My guess is that it doesn't.

--
- Nicholas Paldino [.NET/C# MVP]
- mv*@spam.guard. caspershouse.co m

"Ian Frawley" <ch****@away.co m> wrote in message
news:QK******** ****@news-1.opaltelecom.n et...
Anyone used the WindowsIdentity class with success? I find if I try to
change the current identity to one that exists on another machine and
then
try to perform and action on that machine i.e. restart a service or list

the

available processes I keep getting access denied exceptions. Here is an
example of my code:

[DllImport("adva pi32.dll", SetLastError=tr ue)]
public extern static bool LogonUser(Strin g lpszUsername, String
lpszDomain,
String lpszPassword, int dwLogonType,
int dwLogonProvider , ref IntPtr phToken);
[STAThread]
static void Main(string[] args)
{
IntPtr UserToken = new IntPtr(0);
//int UserToken;
bool loggedOn;
try
{
loggedOn = LogonUser(
"Administrator" ,
Dns.GetHostName (),
"",3,0, ref UserToken);
}
catch(Exception ex)
{
throw ex;
}

if(loggedOn)
{
WindowsIdentity SystemMonitorUs er = new WindowsIdentity (UserToken);
WindowsImperson ationContext ImpersonatedUse r =
SystemMonitorUs er.Impersonate( );
Console.WriteLi ne(SystemMonito rUser.Name);

try
{
Process[] _process;

_process = Process.GetProc esses("192.168. 6.236");
foreach (Process p in _process)
{
Console.WriteLi ne(p.ProcessNam e.ToString());
}
}
catch (Exception ex)
{
Console.WriteLi ne(ex.Message);
throw ex;
}
ImpersonatedUse r.Undo();
}
}
Ian

--
"Life should NOT be a journey to the grave
with the intention of arriving safely in an
attractive and well preserved body,
but rather to skid in sideways,
chocolate in one hand, beer in the other,
body thoroughly used up,
totally worn out and screaming
WOO HOO what a ride!"

[Ian Frawley]

Hi

I might be sounding a bit thick but if the user creating the impersonation
on the remote machine had the rights to do this then why would it need to
impersonate at all? Or is the impersonate user rights actually lower that
say restarting a windows service?

Ian
"Nicholas Paldino [.NET/C# MVP]" <mv*@spam.guard .caspershouse.c om> wrote in
message news:eK******** ******@TK2MSFTN GP10.phx.gbl...

Ian,

Absolutely. How secure would an OS be if anyone could impersonate
anyone else? =)

--
- Nicholas Paldino [.NET/C# MVP]
- mv*@spam.guard. caspershouse.co m

"Ian Frawley" <ch****@away.co m> wrote in message
news:92******** ****@news-1.opaltelecom.n et...

Does the WindowsIdentity class require the current user to have these
rights?
"Nicholas Paldino [.NET/C# MVP]" <mv*@spam.guard .caspershouse.c om> wrote
in
message news:%2******** ********@TK2MSF TNGP09.phx.gbl. ..

Ian,

This might be a foolish question, but does the user account on the
machine you are running the code on have rights to impersonate a user

on the

other machine? My guess is that it doesn't.

--
- Nicholas Paldino [.NET/C# MVP]
- mv*@spam.guard. caspershouse.co m

"Ian Frawley" <ch****@away.co m> wrote in message
news:QK******** ****@news-1.opaltelecom.n et...
Anyone used the WindowsIdentity class with success? I find if I try to
change the current identity to one that exists on another machine and
then
try to perform and action on that machine i.e. restart a service or

list the

available processes I keep getting access denied exceptions. Here is an
example of my code:

[DllImport("adva pi32.dll", SetLastError=tr ue)]
public extern static bool LogonUser(Strin g lpszUsername, String
lpszDomain,
String lpszPassword, int dwLogonType,
int dwLogonProvider , ref IntPtr phToken);
[STAThread]
static void Main(string[] args)
{
IntPtr UserToken = new IntPtr(0);
//int UserToken;
bool loggedOn;
try
{
loggedOn = LogonUser(
"Administrator" ,
Dns.GetHostName (),
"",3,0, ref UserToken);
}
catch(Exception ex)
{
throw ex;
}

if(loggedOn)
{
WindowsIdentity SystemMonitorUs er = new WindowsIdentity (UserToken);
WindowsImperson ationContext ImpersonatedUse r =
SystemMonitorUs er.Impersonate( );
Console.WriteLi ne(SystemMonito rUser.Name);

try
{
Process[] _process;

_process = Process.GetProc esses("192.168. 6.236");
foreach (Process p in _process)
{
Console.WriteLi ne(p.ProcessNam e.ToString());
}
}
catch (Exception ex)
{
Console.WriteLi ne(ex.Message);
throw ex;
}
ImpersonatedUse r.Undo();
}
}
Ian

--
"Life should NOT be a journey to the grave
with the intention of arriving safely in an
attractive and well preserved body,
but rather to skid in sideways,
chocolate in one hand, beer in the other,
body thoroughly used up,
totally worn out and screaming
WOO HOO what a ride!"

[Ian Frawley]

Where does the impersonate user right live?

Ian
"Ian Frawley" <ch****@away.co m> wrote in message
news:Tv******** ****@news-1.opaltelecom.n et...

Hi

I might be sounding a bit thick but if the user creating the impersonation
on the remote machine had the rights to do this then why would it need to
impersonate at all? Or is the impersonate user rights actually lower that
say restarting a windows service?

Ian
"Nicholas Paldino [.NET/C# MVP]" <mv*@spam.guard .caspershouse.c om> wrote in message news:eK******** ******@TK2MSFTN GP10.phx.gbl...

Ian,

Absolutely. How secure would an OS be if anyone could impersonate
anyone else? =)

--
- Nicholas Paldino [.NET/C# MVP]
- mv*@spam.guard. caspershouse.co m

"Ian Frawley" <ch****@away.co m> wrote in message
news:92******** ****@news-1.opaltelecom.n et...

Does the WindowsIdentity class require the current user to have these
rights?
"Nicholas Paldino [.NET/C# MVP]" <mv*@spam.guard .caspershouse.c om> wrote in
message news:%2******** ********@TK2MSF TNGP09.phx.gbl. ..
> Ian,
>
> This might be a foolish question, but does the user account on the> machine you are running the code on have rights to impersonate a user on the
> other machine? My guess is that it doesn't.
>
> --
> - Nicholas Paldino [.NET/C# MVP]
> - mv*@spam.guard. caspershouse.co m
>
> "Ian Frawley" <ch****@away.co m> wrote in message
> news:QK******** ****@news-1.opaltelecom.n et...
> Anyone used the WindowsIdentity class with success? I find if I try to> change the current identity to one that exists on another machine and
> then
> try to perform and action on that machine i.e. restart a service or list the
> available processes I keep getting access denied exceptions. Here is an> example of my code:
>
> [DllImport("adva pi32.dll", SetLastError=tr ue)]
> public extern static bool LogonUser(Strin g lpszUsername, String
> lpszDomain,
> String lpszPassword, int dwLogonType,
> int dwLogonProvider , ref IntPtr phToken);
> [STAThread]
> static void Main(string[] args)
> {
> IntPtr UserToken = new IntPtr(0);
> //int UserToken;
> bool loggedOn;
> try
> {
> loggedOn = LogonUser(
> "Administrator" ,
> Dns.GetHostName (),
> "",3,0, ref UserToken);
> }
> catch(Exception ex)
> {
> throw ex;
> }
>
> if(loggedOn)
> {
> WindowsIdentity SystemMonitorUs er = new WindowsIdentity (UserToken);> WindowsImperson ationContext ImpersonatedUse r =
> SystemMonitorUs er.Impersonate( );
> Console.WriteLi ne(SystemMonito rUser.Name);
>
> try
> {
> Process[] _process;
>
> _process = Process.GetProc esses("192.168. 6.236");
> foreach (Process p in _process)
> {
> Console.WriteLi ne(p.ProcessNam e.ToString());
> }
> }
> catch (Exception ex)
> {
> Console.WriteLi ne(ex.Message);
> throw ex;
> }
> ImpersonatedUse r.Undo();
> }
> }
> Ian
>
> --
> "Life should NOT be a journey to the grave
> with the intention of arriving safely in an
> attractive and well preserved body,
> but rather to skid in sideways,
> chocolate in one hand, beer in the other,
> body thoroughly used up,
> totally worn out and screaming
> WOO HOO what a ride!"
>
>

[Ian Frawley]

Where does the impersonate user right live?

Ian

"Nicholas Paldino [.NET/C# MVP]" <mv*@spam.guard .caspershouse.c om> wrote in
message news:eK******** ******@TK2MSFTN GP10.phx.gbl...

Ian,

Absolutely. How secure would an OS be if anyone could impersonate
anyone else? =)

--
- Nicholas Paldino [.NET/C# MVP]
- mv*@spam.guard. caspershouse.co m

"Ian Frawley" <ch****@away.co m> wrote in message
news:92******** ****@news-1.opaltelecom.n et...

Does the WindowsIdentity class require the current user to have these
rights?
"Nicholas Paldino [.NET/C# MVP]" <mv*@spam.guard .caspershouse.c om> wrote
in
message news:%2******** ********@TK2MSF TNGP09.phx.gbl. ..

Ian,

This might be a foolish question, but does the user account on the
machine you are running the code on have rights to impersonate a user

on the

other machine? My guess is that it doesn't.

--
- Nicholas Paldino [.NET/C# MVP]
- mv*@spam.guard. caspershouse.co m

"Ian Frawley" <ch****@away.co m> wrote in message
news:QK******** ****@news-1.opaltelecom.n et...
Anyone used the WindowsIdentity class with success? I find if I try to
change the current identity to one that exists on another machine and
then
try to perform and action on that machine i.e. restart a service or

list the

available processes I keep getting access denied exceptions. Here is an
example of my code:

[DllImport("adva pi32.dll", SetLastError=tr ue)]
public extern static bool LogonUser(Strin g lpszUsername, String
lpszDomain,
String lpszPassword, int dwLogonType,
int dwLogonProvider , ref IntPtr phToken);
[STAThread]
static void Main(string[] args)
{
IntPtr UserToken = new IntPtr(0);
//int UserToken;
bool loggedOn;
try
{
loggedOn = LogonUser(
"Administrator" ,
Dns.GetHostName (),
"",3,0, ref UserToken);
}
catch(Exception ex)
{
throw ex;
}

if(loggedOn)
{
WindowsIdentity SystemMonitorUs er = new WindowsIdentity (UserToken);
WindowsImperson ationContext ImpersonatedUse r =
SystemMonitorUs er.Impersonate( );
Console.WriteLi ne(SystemMonito rUser.Name);

try
{
Process[] _process;

_process = Process.GetProc esses("192.168. 6.236");
foreach (Process p in _process)
{
Console.WriteLi ne(p.ProcessNam e.ToString());
}
}
catch (Exception ex)
{
Console.WriteLi ne(ex.Message);
throw ex;
}
ImpersonatedUse r.Undo();
}
}
Ian

--
"Life should NOT be a journey to the grave
with the intention of arriving safely in an
attractive and well preserved body,
but rather to skid in sideways,
chocolate in one hand, beer in the other,
body thoroughly used up,
totally worn out and screaming
WOO HOO what a ride!"

[Nicholas Paldino [.NET/C# MVP]]

Ian,

If you are running code on one machine, you aren't creating the
impersonation on the other machine. You are creating an impersonation on
the local machine. If you are in a workgroup, then you aren't going to be
able to impersonate that user on the other machine (I believe) because the
users are actually different.

Rather, you have to impersonate a user on the local machine, and then
try to perform an operation on the other machine (in workgroup mode, the way
it works is that you have to have two accounts with the same login name and
password which match).
--
- Nicholas Paldino [.NET/C# MVP]
- mv*@spam.guard. caspershouse.co m

"Ian Frawley" <ch****@away.co m> wrote in message
news:Tv******** ****@news-1.opaltelecom.n et...

Hi

I might be sounding a bit thick but if the user creating the impersonation
on the remote machine had the rights to do this then why would it need to
impersonate at all? Or is the impersonate user rights actually lower that
say restarting a windows service?

Ian
"Nicholas Paldino [.NET/C# MVP]" <mv*@spam.guard .caspershouse.c om> wrote
in
message news:eK******** ******@TK2MSFTN GP10.phx.gbl...

Ian,

Absolutely. How secure would an OS be if anyone could impersonate
anyone else? =)

--
- Nicholas Paldino [.NET/C# MVP]
- mv*@spam.guard. caspershouse.co m

"Ian Frawley" <ch****@away.co m> wrote in message
news:92******** ****@news-1.opaltelecom.n et...

> Does the WindowsIdentity class require the current user to have these
> rights?
>
>
> "Nicholas Paldino [.NET/C# MVP]" <mv*@spam.guard .caspershouse.c om>
> wrote
> in
> message news:%2******** ********@TK2MSF TNGP09.phx.gbl. ..
>> Ian,
>>
>> This might be a foolish question, but does the user account on the
>> machine you are running the code on have rights to impersonate a user on > the
>> other machine? My guess is that it doesn't.
>>
>> --
>> - Nicholas Paldino [.NET/C# MVP]
>> - mv*@spam.guard. caspershouse.co m
>>
>> "Ian Frawley" <ch****@away.co m> wrote in message
>> news:QK******** ****@news-1.opaltelecom.n et...
>> Anyone used the WindowsIdentity class with success? I find if I try to
>> change the current identity to one that exists on another machine and
>> then
>> try to perform and action on that machine i.e. restart a service or list > the
>> available processes I keep getting access denied exceptions. Here is
>> an
>> example of my code:
>>
>> [DllImport("adva pi32.dll", SetLastError=tr ue)]
>> public extern static bool LogonUser(Strin g lpszUsername, String
>> lpszDomain,
>> String lpszPassword, int dwLogonType,
>> int dwLogonProvider , ref IntPtr phToken);
>> [STAThread]
>> static void Main(string[] args)
>> {
>> IntPtr UserToken = new IntPtr(0);
>> //int UserToken;
>> bool loggedOn;
>> try
>> {
>> loggedOn = LogonUser(
>> "Administrator" ,
>> Dns.GetHostName (),
>> "",3,0, ref UserToken);
>> }
>> catch(Exception ex)
>> {
>> throw ex;
>> }
>>
>> if(loggedOn)
>> {
>> WindowsIdentity SystemMonitorUs er = new
>> WindowsIdentity (UserToken);
>> WindowsImperson ationContext ImpersonatedUse r =
>> SystemMonitorUs er.Impersonate( );
>> Console.WriteLi ne(SystemMonito rUser.Name);
>>
>> try
>> {
>> Process[] _process;
>>
>> _process = Process.GetProc esses("192.168. 6.236");
>> foreach (Process p in _process)
>> {
>> Console.WriteLi ne(p.ProcessNam e.ToString());
>> }
>> }
>> catch (Exception ex)
>> {
>> Console.WriteLi ne(ex.Message);
>> throw ex;
>> }
>> ImpersonatedUse r.Undo();
>> }
>> }
>> Ian
>>
>> --
>> "Life should NOT be a journey to the grave
>> with the intention of arriving safely in an
>> attractive and well preserved body,
>> but rather to skid in sideways,
>> chocolate in one hand, beer in the other,
>> body thoroughly used up,
>> totally worn out and screaming
>> WOO HOO what a ride!"
>>
>>
>
>

[Ian Frawley]

Nicholas,

That is infact what I have been doing but I have also been changing the
domain name in the call
public extern static bool LogonUser(Strin g lpszUsername, String lpszDomain,
String lpszPassword, int dwLogonType, int dwLogonProvider , ref IntPtr
phToken);

and I have even tried imbedding it twice i.e. impersonating a high priv user
locally and then trying to impersonate that user onto the remote box, which
is where the account is also set up but this has been to no avail.

Think I will try some more tomorrow as I have now finished for the day.

Ian

"Nicholas Paldino [.NET/C# MVP]" <mv*@spam.guard .caspershouse.c om> wrote in
message news:uo******** *****@TK2MSFTNG P14.phx.gbl...

Ian,

If you are running code on one machine, you aren't creating the
impersonation on the other machine. You are creating an impersonation on
the local machine. If you are in a workgroup, then you aren't going to be
able to impersonate that user on the other machine (I believe) because the
users are actually different.

Rather, you have to impersonate a user on the local machine, and then
try to perform an operation on the other machine (in workgroup mode, the way it works is that you have to have two accounts with the same login name and password which match).
--
- Nicholas Paldino [.NET/C# MVP]
- mv*@spam.guard. caspershouse.co m

"Ian Frawley" <ch****@away.co m> wrote in message
news:Tv******** ****@news-1.opaltelecom.n et...

Hi

I might be sounding a bit thick but if the user creating the impersonation on the remote machine had the rights to do this then why would it need to impersonate at all? Or is the impersonate user rights actually lower that say restarting a windows service?

Ian
"Nicholas Paldino [.NET/C# MVP]" <mv*@spam.guard .caspershouse.c om> wrote
in
message news:eK******** ******@TK2MSFTN GP10.phx.gbl...

Ian,

Absolutely. How secure would an OS be if anyone could impersonate
anyone else? =)

--
- Nicholas Paldino [.NET/C# MVP]
- mv*@spam.guard. caspershouse.co m

"Ian Frawley" <ch****@away.co m> wrote in message
news:92******** ****@news-1.opaltelecom.n et...
> Does the WindowsIdentity class require the current user to have these
> rights?
>
>
> "Nicholas Paldino [.NET/C# MVP]" <mv*@spam.guard .caspershouse.c om>
> wrote
> in
> message news:%2******** ********@TK2MSF TNGP09.phx.gbl. ..
>> Ian,
>>
>> This might be a foolish question, but does the user account on the >> machine you are running the code on have rights to impersonate a user

on

> the
>> other machine? My guess is that it doesn't.
>>
>> --
>> - Nicholas Paldino [.NET/C# MVP]
>> - mv*@spam.guard. caspershouse.co m
>>
>> "Ian Frawley" <ch****@away.co m> wrote in message
>> news:QK******** ****@news-1.opaltelecom.n et...
>> Anyone used the WindowsIdentity class with success? I find if I try

to >> change the current identity to one that exists on another machine and >> then
>> try to perform and action on that machine i.e. restart a service or

list

> the
>> available processes I keep getting access denied exceptions. Here is
>> an
>> example of my code:
>>
>> [DllImport("adva pi32.dll", SetLastError=tr ue)]
>> public extern static bool LogonUser(Strin g lpszUsername, String
>> lpszDomain,
>> String lpszPassword, int dwLogonType,
>> int dwLogonProvider , ref IntPtr phToken);
>> [STAThread]
>> static void Main(string[] args)
>> {
>> IntPtr UserToken = new IntPtr(0);
>> //int UserToken;
>> bool loggedOn;
>> try
>> {
>> loggedOn = LogonUser(
>> "Administrator" ,
>> Dns.GetHostName (),
>> "",3,0, ref UserToken);
>> }
>> catch(Exception ex)
>> {
>> throw ex;
>> }
>>
>> if(loggedOn)
>> {
>> WindowsIdentity SystemMonitorUs er = new
>> WindowsIdentity (UserToken);
>> WindowsImperson ationContext ImpersonatedUse r =
>> SystemMonitorUs er.Impersonate( );
>> Console.WriteLi ne(SystemMonito rUser.Name);
>>
>> try
>> {
>> Process[] _process;
>>
>> _process = Process.GetProc esses("192.168. 6.236");
>> foreach (Process p in _process)
>> {
>> Console.WriteLi ne(p.ProcessNam e.ToString());
>> }
>> }
>> catch (Exception ex)
>> {
>> Console.WriteLi ne(ex.Message);
>> throw ex;
>> }
>> ImpersonatedUse r.Undo();
>> }
>> }
>> Ian
>>
>> --
>> "Life should NOT be a journey to the grave
>> with the intention of arriving safely in an
>> attractive and well preserved body,
>> but rather to skid in sideways,
>> chocolate in one hand, beer in the other,
>> body thoroughly used up,
>> totally worn out and screaming
>> WOO HOO what a ride!"
>>
>>
>
>

[Willy Denoyette [MVP]]

Not sure what you want to achieve here, you are impersonating a "local" administrator account using a NETWORK logontype(LOGON 32_LOGON_NETWOR K = 3) to access remote resources, this will never work please consult the platform sdk docs for details on LogonUser.
Here's how you should proceed:
1. Call LogonUser specifying LOGON32_LOGON_N ETWORK_CLEARTEX T (8) or LOGON32_LOGON_N EW_CREDENTIALS (9) as logontype AND the impersonating account's credentials need to match the remote account, or
2. (better)Imperso nate a remote account using LOGON32_LOGON_N EW_CREDENTIALS (9) as logontype.

Remarks: 1.not sure this works with an empty password, which is a BAD idea anyway for an administrator account.
2. Calling LogonUser is in general a bad thing to do, you better use System.Manageme nt classes and WMI to access remote servers process info and performance counters.

Willy.

"Ian Frawley" <ch****@away.co m> wrote in message news:QK******** ****@news-1.opaltelecom.n et...
Anyone used the WindowsIdentity class with success? I find if I try to change the current identity to one that exists on another machine and then try to perform and action on that machine i.e. restart a service or list the available processes I keep getting access denied exceptions. Here is an example of my code:

[DllImport("adva pi32.dll", SetLastError=tr ue)]
public extern static bool LogonUser(Strin g lpszUsername, String lpszDomain,
String lpszPassword, int dwLogonType,
int dwLogonProvider , ref IntPtr phToken);

[STAThread]
static void Main(string[] args)
{
IntPtr UserToken = new IntPtr(0);

//int UserToken;
bool loggedOn;

try
{
loggedOn = LogonUser(
"Administrator" ,
Dns.GetHostName (),
"",3,0, ref UserToken);
}
catch(Exception ex)
{
throw ex;
}

if(loggedOn)
{
WindowsIdentity SystemMonitorUs er = new WindowsIdentity (UserToken);
WindowsImperson ationContext ImpersonatedUse r = SystemMonitorUs er.Impersonate( );
Console.WriteLi ne(SystemMonito rUser.Name);

try
{
Process[] _process;

_process = Process.GetProc esses("192.168. 6.236");

foreach (Process p in _process)
{
Console.WriteLi ne(p.ProcessNam e.ToString());
}
}
catch (Exception ex)
{
Console.WriteLi ne(ex.Message);
throw ex;
}

ImpersonatedUse r.Undo();
}

}

Ian
--
"Life should NOT be a journey to the grave
with the intention of arriving safely in an
attractive and well preserved body,
but rather to skid in sideways,
chocolate in one hand, beer in the other,
body thoroughly used up,
totally worn out and screaming
WOO HOO what a ride!"