Hi
I need to create a MessageQueue in my C# service (running as SYSTEM). Users
will have no permissions on this queue, so I can't look if messages are
present. When setting MessageQueue.SetPermissions, I have the problem of
knowing the Windows Group Name. I'd like to set Full Control to either Users
or Everyone (doesn't really matter), but the service might run under English
(Users, Everyone) or German Windows (Benutzer, Jeder). On a German Windows,
SetPermissions failes with "Everyone" and succeeds with "Jeder".
How can I get the locale-specific name of a role, say "Users"?
Or is there a much easier way to set Full Control Permissions on a
MessageQueue for Everyone?
Thanks a lot
Simon 4 5907
Can you p/invoke the LookupAccountName API, passing in the SID of the group
you want to use? Everyone and Authenticated Users are both well-known SID
values that don't change, so that might be a good way to get the localized
version.
It is too bad that the .NET MQ API won't take a SID directly as then you
would not have this problem.
Joe K.
"Simon Niederberger" <si***@sincore.ch> wrote in message
news:ec**************@TK2MSFTNGP14.phx.gbl... Hi
I need to create a MessageQueue in my C# service (running as SYSTEM). Users will have no permissions on this queue, so I can't look if messages are present. When setting MessageQueue.SetPermissions, I have the problem of knowing the Windows Group Name. I'd like to set Full Control to either Users or Everyone (doesn't really matter), but the service might run under English (Users, Everyone) or German Windows (Benutzer, Jeder). On a German Windows, SetPermissions failes with "Everyone" and succeeds with "Jeder". How can I get the locale-specific name of a role, say "Users"?
Or is there a much easier way to set Full Control Permissions on a MessageQueue for Everyone?
Thanks a lot Simon
Great, got that to work. However, now my assembly has an Win32API call, so
for deployment, I need full trust on the client. I found that I should add a
custom action in the setup project, but apart from that, I'm stumped.
Can you direct me to a step-by-step guide on how to make my assembly being
distributed with a Setup Project be fully trusted on the client?
(Essentially run the .NET framework 1.1 Wizard "Trust assembly" as custom
action). I'm using VS 2003.
Thanks a lot
Simon
"Joe Kaplan (MVP - ADSI)" <jo*************@removethis.accenture.com> wrote
in message news:uL*************@TK2MSFTNGP14.phx.gbl... Can you p/invoke the LookupAccountName API, passing in the SID of the
group you want to use? Everyone and Authenticated Users are both well-known SID values that don't change, so that might be a good way to get the localized version.
It is too bad that the .NET MQ API won't take a SID directly as then you would not have this problem.
Joe K.
"Simon Niederberger" <si***@sincore.ch> wrote in message news:ec**************@TK2MSFTNGP14.phx.gbl... Hi
I need to create a MessageQueue in my C# service (running as SYSTEM). Users will have no permissions on this queue, so I can't look if messages are present. When setting MessageQueue.SetPermissions, I have the problem of knowing the Windows Group Name. I'd like to set Full Control to either Users or Everyone (doesn't really matter), but the service might run under English (Users, Everyone) or German Windows (Benutzer, Jeder). On a German Windows, SetPermissions failes with "Everyone" and succeeds with "Jeder". How can I get the locale-specific name of a role, say "Users"?
Or is there a much easier way to set Full Control Permissions on a MessageQueue for Everyone?
Thanks a lot Simon
I thought you needed full trust to call into System.Messaging anyway since
it doesn't have the AllowPartiallyTrustedCallersAttribute. If your code is
being installed to the local machine, you will have full trust by default
anyway, so that probably isn't an issue. Are you actually get security
exceptions?
If you really feel like you need to change security policy, I'd suggest
starting a new thread as Nicole is much better at that stuff than me and can
provide you with more guidance.
Joe K.
"Simon Niederberger" <si***@sincore.ch> wrote in message
news:O$*************@TK2MSFTNGP10.phx.gbl... Great, got that to work. However, now my assembly has an Win32API call, so for deployment, I need full trust on the client. I found that I should add a custom action in the setup project, but apart from that, I'm stumped.
Can you direct me to a step-by-step guide on how to make my assembly being distributed with a Setup Project be fully trusted on the client? (Essentially run the .NET framework 1.1 Wizard "Trust assembly" as custom action). I'm using VS 2003.
Thanks a lot Simon
"Joe Kaplan (MVP - ADSI)" <jo*************@removethis.accenture.com> wrote in message news:uL*************@TK2MSFTNGP14.phx.gbl... Can you p/invoke the LookupAccountName API, passing in the SID of the group you want to use? Everyone and Authenticated Users are both well-known SID values that don't change, so that might be a good way to get the localized version.
It is too bad that the .NET MQ API won't take a SID directly as then you would not have this problem.
Joe K.
"Simon Niederberger" <si***@sincore.ch> wrote in message news:ec**************@TK2MSFTNGP14.phx.gbl... > Hi > > I need to create a MessageQueue in my C# service (running as SYSTEM). > Users > will have no permissions on this queue, so I can't look if messages are > present. When setting MessageQueue.SetPermissions, I have the problem > of > knowing the Windows Group Name. I'd like to set Full Control to either > Users > or Everyone (doesn't really matter), but the service might run under > English > (Users, Everyone) or German Windows (Benutzer, Jeder). On a German > Windows, > SetPermissions failes with "Everyone" and succeeds with "Jeder". > How can I get the locale-specific name of a role, say "Users"? > > Or is there a much easier way to set Full Control Permissions on a > MessageQueue for Everyone? > > Thanks a lot > Simon > >
No Joe, you're absolutely right. That was an apparent newbie question. I was
testing my test.exe from a network share, which doesn't reflect the final
setup. If I move the exe to a local drive, everything is great.
So my final solution is:
Use code from http://www.codeproject.com/csharp/SidTranslator.asp
Install application locally (was gonna do that anyway)
Use SID S-1-1-0 for group "Everyone"
Thanks a lot, Joe
Simon
"Joe Kaplan (MVP - ADSI)" <jo*************@removethis.accenture.com> wrote
in message news:Oq*************@TK2MSFTNGP15.phx.gbl... I thought you needed full trust to call into System.Messaging anyway since it doesn't have the AllowPartiallyTrustedCallersAttribute. If your code
is being installed to the local machine, you will have full trust by default anyway, so that probably isn't an issue. Are you actually get security exceptions?
If you really feel like you need to change security policy, I'd suggest starting a new thread as Nicole is much better at that stuff than me and
can provide you with more guidance.
Joe K.
"Simon Niederberger" <si***@sincore.ch> wrote in message news:O$*************@TK2MSFTNGP10.phx.gbl... Great, got that to work. However, now my assembly has an Win32API call,
so for deployment, I need full trust on the client. I found that I should
add a custom action in the setup project, but apart from that, I'm stumped.
Can you direct me to a step-by-step guide on how to make my assembly
being distributed with a Setup Project be fully trusted on the client? (Essentially run the .NET framework 1.1 Wizard "Trust assembly" as
custom action). I'm using VS 2003.
Thanks a lot Simon
"Joe Kaplan (MVP - ADSI)" <jo*************@removethis.accenture.com>
wrote in message news:uL*************@TK2MSFTNGP14.phx.gbl... Can you p/invoke the LookupAccountName API, passing in the SID of the group you want to use? Everyone and Authenticated Users are both well-known SID values that don't change, so that might be a good way to get the localized version.
It is too bad that the .NET MQ API won't take a SID directly as then
you would not have this problem.
Joe K.
"Simon Niederberger" <si***@sincore.ch> wrote in message news:ec**************@TK2MSFTNGP14.phx.gbl... > Hi > > I need to create a MessageQueue in my C# service (running as SYSTEM). > Users > will have no permissions on this queue, so I can't look if messages
are > present. When setting MessageQueue.SetPermissions, I have the problem > of > knowing the Windows Group Name. I'd like to set Full Control to
either > Users > or Everyone (doesn't really matter), but the service might run under > English > (Users, Everyone) or German Windows (Benutzer, Jeder). On a German > Windows, > SetPermissions failes with "Everyone" and succeeds with "Jeder". > How can I get the locale-specific name of a role, say "Users"? > > Or is there a much easier way to set Full Control Permissions on a > MessageQueue for Everyone? > > Thanks a lot > Simon > >
This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics
by: Ken Lindner |
last post by:
I have a need to become familiar with SQL Server 2000 for work.
Needless to say I am new to SQL Server any version, but not IT in
general. My employer has provided me with the SQL Server 2000...
|
by: Christian McArdle |
last post by:
REQUEST FOR DISCUSSION (RFD)
unmoderated group comp.os.ms-windows.programmer.64bit
This is a formal Request For Discussion (RFD) to create
comp.os.ms-windows.programmer.64bit as an unmoderated...
|
by: Steven Fox |
last post by:
============================================================
About DB2 Administration Tools Environment
============================================================
DB2 administration tools level:...
|
by: pberna |
last post by:
Dear all,
I built a Web Form application to start and stop a Windows Service remotely.
I successful tested the application on Windows 2000 server + IIS. I must
include the ASPNET user
to the...
|
by: James |
last post by:
I have a VB windows forms application that accesses a Microsoft Access
database that has been secured using user-level security. The
application is being deployed using No-Touch deployment. The...
|
by: Amjad |
last post by:
Hi,
I just wrote a test Windows Service that creates a text file on startup
(please see my code below). The file is never created.
Protected Overrides Sub OnStart(ByVal args() As String)
Dim...
|
by: =?Utf-8?B?Q2Fubm9kYWwxOQ==?= |
last post by:
I'm having a problem getting the accurate information to the guide.. Its
saying its soposted to be this one show, and its somthing else.. I've double
check my setting for what general area, and I...
|
by: =?Utf-8?B?SnJ4dHVzZXIx?= |
last post by:
I just started using Windows Live OneCare, I had been using Norton, but was
unable to fix the problems I was having. I have yet been unsuccessful with
OneCare as well. I keep getting the same...
|
by: Max2006 |
last post by:
Hi,
I am trying to limit my wcf service endpoint to response to only given
windows user or group. How can I do that? Is there any way to configure that
in the .config file?
Thank you,
Max
|
by: josequinonesii |
last post by:
I've searched, I've read, I've tested and re-read numerous post but to no avail yet...
Quite simply, the settings I've applied to my httpd.conf, httpd-vhost.conf and my hosts files simply does not...
|
by: DolphinDB |
last post by:
Tired of spending countless mintues downsampling your data? Look no further!
In this article, you’ll learn how to efficiently downsample 6.48 billion high-frequency records to 61 million...
|
by: ryjfgjl |
last post by:
ExcelToDatabase: batch import excel into database automatically...
|
by: isladogs |
last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM).
In this month's session, we are pleased to welcome back...
|
by: isladogs |
last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM).
In this month's session, we are pleased to welcome back...
|
by: Vimpel783 |
last post by:
Hello!
Guys, I found this code on the Internet, but I need to modify it a little. It works well, the problem is this: Data is sent from only one cell, in this case B5, but it is necessary that data...
|
by: ArrayDB |
last post by:
The error message I've encountered is; ERROR:root:Error generating model response: exception: access violation writing 0x0000000000005140, which seems to be indicative of an access violation...
|
by: PapaRatzi |
last post by:
Hello,
I am teaching myself MS Access forms design and Visual Basic. I've created a table to capture a list of Top 30 singles and forms to capture new entries. The final step is a form (unbound)...
|
by: Faith0G |
last post by:
I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...
|
by: isladogs |
last post by:
The next Access Europe User Group meeting will be on Wednesday 3 Apr 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM).
In this session, we are pleased to welcome former...
| |