Can I grant temp rights to a user in an application

[jean-dot-paul-at-opelwilly-dot-com]

Hello all,

I have two different applications where my application wants to do something
the logged user has not the rights to:

1) Change a HKEY_LOCAL_MACHINE key value. The user has only Local\User
rights and I seem to need Administrator rights. Is it posible to grant in my
program (Windows .NET) temporaly local/administrator rights, knowing the
password. Or is there an other way around?

2) An analoge problem: I want to write a tool that enables/disables
site-access-rules on an ISA server that can be run by any serveroperator
without giving them permanent admin rights. (The other settings of the ISA
server may not been seen/modified by the user)

tnx in advance

Jean Paul

[Kannan.V [MCAD.net]]

hi Jean,

this link might help you in changing security permission for code access.

http://blogs.msdn.com/shawnfa/archiv...09/227534.aspx

regds,
Kannan.V

"jean-dot-paul-at-opelwilly-dot-com" wrote:

Hello all,

I have two different applications where my application wants to do something
the logged user has not the rights to:

1) Change a HKEY_LOCAL_MACHINE key value. The user has only Local\User
rights and I seem to need Administrator rights. Is it posible to grant in my
program (Windows .NET) temporaly local/administrator rights, knowing the
password. Or is there an other way around?

2) An analoge problem: I want to write a tool that enables/disables
site-access-rules on an ISA server that can be run by any serveroperator
without giving them permanent admin rights. (The other settings of the ISA
server may not been seen/modified by the user)

tnx in advance

Jean Paul

[jean-dot-paul-at-opelwilly-dot-com]

Kannan,

Tnx for reply,

Your sugestion don't not give me a solution. Even if I give 'full trust ' to
the application, the user rights limits my user to write to the LOCAL
MACHINE regkeys.

If I make him administrator there is not a problem but even SuperUsers can't
access the reg.

If you, or others, happens to have more idee's, let them come

Jean Paul
-------------------------------------------------------------------------------------
C# is Second finger high on the A
"Kannan.V [MCAD.net]" <Ka************@discussions.microsoft.com> schreef in
bericht news:F3**********************************@microsof t.com...

hi Jean,

this link might help you in changing security permission for code access.

http://blogs.msdn.com/shawnfa/archiv...09/227534.aspx

regds,
Kannan.V

"jean-dot-paul-at-opelwilly-dot-com" wrote:

Hello all,

I have two different applications where my application wants to do
something
the logged user has not the rights to:

1) Change a HKEY_LOCAL_MACHINE key value. The user has only Local\User
rights and I seem to need Administrator rights. Is it posible to grant in
my
program (Windows .NET) temporaly local/administrator rights, knowing the
password. Or is there an other way around?

2) An analoge problem: I want to write a tool that enables/disables
site-access-rules on an ISA server that can be run by any serveroperator
without giving them permanent admin rights. (The other settings of the
ISA
server may not been seen/modified by the user)

tnx in advance

Jean Paul

[Dave]

Hello Jean Paul

I think you said that you know the administrator account credentials, so you
could impersonate that account, see link:

http://support.microsoft.com/kb/306158/EN-US/

Dave

"jean-dot-paul-at-opelwilly-dot-com" wrote:

Hello all,

I have two different applications where my application wants to do something
the logged user has not the rights to:

1) Change a HKEY_LOCAL_MACHINE key value. The user has only Local\User
rights and I seem to need Administrator rights. Is it posible to grant in my
program (Windows .NET) temporaly local/administrator rights, knowing the
password. Or is there an other way around?

2) An analoge problem: I want to write a tool that enables/disables
site-access-rules on an ISA server that can be run by any serveroperator
without giving them permanent admin rights. (The other settings of the ISA
server may not been seen/modified by the user)

tnx in advance

Jean Paul