Click here to Skip to main content
15,867,330 members
Articles / Web Development / IIS

A small C# Class for impersonating a User

Rate me:
Please Sign up or sign in to vote.
4.94/5 (127 votes)
11 Apr 2005CPOL3 min read 1.3M   52.3K   243   192
Introduced a class that simplifies Windows Impersonation in C#.

Introduction

The term "Impersonation" in a programming context refers to a technique that executes the code under another user context than the user who originally started an application, i.e. the user context is temporarily changed once or multiple times during the execution of an application.

The reason for doing this is to perform tasks that the current user context of an application is not allowed to do. Of course you could grant the user executing an application more privileges, but usually this is a bad idea (due to security constraints) or impossible (e.g. if you don't have full administrative access to a machine to do so).

This article presents an easy-to-use class to impersonate a user. While writing this, I found out that Marc Merrit had written an article ("Windows Impersonation using C#") that uses the same Microsoft knowledge base code (from Q306158) that I have used. The code presented in my article differs in the fact that you could use it inside a using-block to safely release resources and that I use slightly more exceptions to report errors. But from a first look, both his and my article do the same job, so it's up to you to decide what to do.

(For the latest changes, please see the History section below).

Background

I wrote the Impersonator class because of a need to write a web page with ASP.NET to make a server reboot. In order to do this, I needed to impersonate the part of my code that does the actual reboot.

The constructor of the class internally calls the Windows function LogonUser through P/Invoke. Please see the MSDN documentation of the function for a full description of all three parameters (username, domain, password) to the constructor.

Please note: The user context that initiates the impersonation (i.e. not the user context to which it is switched to) needs to have the "Act as part of operating system" privilege set.

Using the code

To use the code, you simply construct the Impersonator class and pass the username, the domain and the password to the constructor. If you place an instance of the class inside a using-block, you need no further steps.

The following is a schematic example of how to use the class:

C#
... 
using ( new Impersonator( "myUsername", "myDomainname", "myPassword" ) )
{
   ...
   
   <code that executes under the new context>
  
   ...
}
  
...

An example project demonstrating the technique is included in the download of this article (please look at the "Program.cs" for the main demonstration source file). Also the complete source code of the class is included inside the source file "Impersonator.cs".

To include the Impersonator class into your project, simply copy and add the source file "Impersonator.cs" to your project, so that it gets compiled with your project.

Conclusion

In this article, I've shown you a small class to quickly and easily impersonate a part of your code to run under another user context. Hopefully you'll find this class useful.

For questions, comments and remarks, please use the commenting section at the bottom of this article.

References

In addition to the links in the article, the following references might be of interest:

  1. Google search for "Windows Impersonation"

History

  • 2005-04-11: Created first version of article.

License

This article, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)


Written By
Chief Technology Officer Zeta Software GmbH
Germany Germany
Uwe does programming since 1989 with experiences in Assembler, C++, MFC and lots of web- and database stuff and now uses ASP.NET and C# extensively, too. He has also teached programming to students at the local university.

➡️ Give me a tip 🙂

In his free time, he does climbing, running and mountain biking. In 2012 he became a father of a cute boy and in 2014 of an awesome girl.

Some cool, free software from us:

Windows 10 Ereignisanzeige  
German Developer Community  
Free Test Management Software - Intuitive, competitive, Test Plans.  
Homepage erstellen - Intuitive, very easy to use.  
Offline-Homepage-Baukasten

Comments and Discussions

 
PraiseThanx! Pin
Wi1done17-Mar-23 0:31
Wi1done17-Mar-23 0:31 
PraiseThank you ! Pin
Erwin@Attentia30-Nov-21 7:53
Erwin@Attentia30-Nov-21 7:53 
QuestionError: The Username and Password is incorrect. Pin
Member 862847919-Jul-21 5:03
Member 862847919-Jul-21 5:03 
AnswerRe: Error: The Username and Password is incorrect. Pin
Josip Sruk26-Nov-22 22:40
Josip Sruk26-Nov-22 22:40 
GeneralHow about using NET USE instead Pin
Uwe Keim27-Nov-22 20:48
sitebuilderUwe Keim27-Nov-22 20:48 
QuestionThis worked for years, but now... .NET Core... Pin
TreesOnTheBeach7-Jul-21 7:17
TreesOnTheBeach7-Jul-21 7:17 
QuestionAttempt to perform an unauthorized operation Pin
Babu.R.K10-May-20 19:22
Babu.R.K10-May-20 19:22 
Bugnetwork path not found error Pin
umauppala8-Jan-19 13:56
umauppala8-Jan-19 13:56 
PraiseExcellent time saver :) Pin
Simon Doll11-Dec-17 23:28
Simon Doll11-Dec-17 23:28 
QuestionVery useful and efficient, thank you! Pin
Member 1302101423-Feb-17 23:42
Member 1302101423-Feb-17 23:42 
PraiseThank you! Pin
tnewton12-Dec-16 8:18
tnewton12-Dec-16 8:18 
PraiseThank you! Pin
Matthias Wirth4-Aug-16 3:33
Matthias Wirth4-Aug-16 3:33 
QuestionLOGON32_LOGON_INTERACTIVE, NetworkCredential Pin
EricBDev29-Jul-16 5:19
EricBDev29-Jul-16 5:19 
PraiseRe: LOGON32_LOGON_INTERACTIVE, NetworkCredential Pin
jivanchuk7-May-19 9:46
jivanchuk7-May-19 9:46 
AnswerRe: LOGON32_LOGON_INTERACTIVE, NetworkCredential Pin
Samuel Fales8-Jun-21 3:04
Samuel Fales8-Jun-21 3:04 
QuestionFileInfo.CopyTo won't work due to insufficient access rights Pin
helelark12319-Apr-16 20:57
helelark12319-Apr-16 20:57 
AnswerRe: FileInfo.CopyTo won't work due to insufficient access rights Pin
Uwe Keim27-Jun-16 1:52
sitebuilderUwe Keim27-Jun-16 1:52 
QuestionFirmenwebseite Pin
Member 1241760026-Mar-16 0:41
Member 1241760026-Mar-16 0:41 
QuestionLogon failure: the user has not been granted the requested logon type at this computer' Pin
thund3rstruck2-Nov-15 10:44
thund3rstruck2-Nov-15 10:44 
QuestionIts helped me a lot and saved my time !!!! Pin
Rajeshrec27628-Aug-15 0:56
Rajeshrec27628-Aug-15 0:56 
QuestionThanks vote 5! Pin
Member 1011648027-Aug-15 22:20
Member 1011648027-Aug-15 22:20 
QuestionAdding support for local (non-domain) user impersonation Pin
daniel zucker1-Jan-15 7:41
daniel zucker1-Jan-15 7:41 
AnswerRe: Adding support for local (non-domain) user impersonation Pin
Uwe Keim1-Jan-15 7:51
sitebuilderUwe Keim1-Jan-15 7:51 
Thanks a lot for your additions!
GeneralRe: Adding support for local (non-domain) user impersonation Pin
Member 117366362-Jun-15 9:25
Member 117366362-Jun-15 9:25 
AnswerThank you buddy Pin
aravinth santosh20-Dec-14 9:35
aravinth santosh20-Dec-14 9:35 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.