Comments by sanjayv.gade (Top 7 by date)

Actually i want a status of jobs from task scheduler through application. for that i have used dll it has a function which retrives job status. application hosted on windows server 2008-R2, on this server we want some rights so we need to do impersonation.

You are right, Only service or admin account can impersonate other users. and i have service/admin account, when i provide admin details into the web config file it works fine. but it is not working same with coding(VB.Net)

below is code i have tried:

Public Function StartImpersonation(ByVal sUserName As String, ByVal sDomain As String, ByVal sPassword As String) As Boolean

Dim bResults As Boolean = False Dim sErrorMessage As String

Dim oWindowsIdentity As WindowsIdentity

Dim hPrimaryToken As IntPtr = IntPtr.Zero 'a Win32 handle to our authentication token

Dim hImpersonationToken As IntPtr = IntPtr.Zero 'a Win32 handle to our impersonation token

If sUserName = String.Empty Then

Throw New ArgumentException("UserName may not be NULL or String.Empty")

End If 'If no domain is given, assume the account is a local one

If sDomain = String.Empty Then

sDomain = Environment.MachineName End If Try

'Validate the provided userid, password and domain.

If LogonUserA(sUserName, sDomain, sPassword, LOGON32_LOGON_INTERACTIVE, LOGON32_PROVIDER_DEFAULT, hPrimaryToken) <> 0 Then

'Convert our token to one whos handle has TOKEN_IMPERSONATE set

If DuplicateToken(hPrimaryToken, SECURITY_IMPERSONATION_LEVEL.SecurityImpersonation, hImpersonationToken) <> 0 Then

'Create a new identity object based on our impersonation token

oWindowsIdentity = New WindowsIdentity(hImpersonationToken)

'Switch to our new identity

m_oImpersonationContext = oWindowsIdentity.Impersonate()

If Not (m_oImpersonationContext Is Nothing) Then

m_bImpersonationActive = True

bResults = True End If

Else

sErrorMessage = String.Format("DuplicateToken failed (rc={0})", Runtime.InteropServices.Marshal.GetLastWin32Error)

'Throw New Security.Authentication.AuthenticationException(sErrorMessage)

End If Else

sErrorMessage = String.Format("LogonUser failed (rc={0})", Runtime.InteropServices.Marshal.GetLastWin32Error)

'Throw New Security.Authentication.AuthenticationException(sErrorMessage)

End If Finally

If Not hImpersonationToken.Equals(IntPtr.Zero) Then

CloseHandle(hImpersonationToken)

hImpersonationToken = IntPtr.Zero End If

If Not hPrimaryToken.Equals(IntPtr.Zero) Then

CloseHandle(hPrimaryToken)

hPrimaryToken = IntPtr.Zero End If End Try

Return bResults End Function

Actually i want a status of jobs from task scheduler through application.

for that i have used dll it has a function which retrives job status. application hosted on windows server 2008-R2, on this server we want some rights so we need to do impersonation. but i am not calling any exe file, then Is it right to create new proccess thread for that?

please check this code which i've added
<authentication mode="Windows">
<identity password="password" username="domainname\username" impersonate="True">

<authorization>

<allow users="*"> <!-- Allow all users -->

thanx dude.....