User privileges required for System.DirectoryServices

Posted by Dave North on Stack Overflow See other posts from Stack Overflow or by Dave North
Published on 2010-05-14T08:18:23Z Indexed on 2010/05/14 8:24 UTC
Read the original article Hit count: 418

Filed under:

directoryservices

|

impersonation

|

users

|

privileges

|

iis

I'm using System.DirectoryServices to list the status of websites running on a server. Currently I'm using impersonation of an admin account for this to run but I'd prefer to have a specific user account with the bare minimum privileges.

Can anyone point me in the right direction?

© Stack Overflow or respective owner

Related posts about directoryservices

FindByIdentity in System.DirectoryServices.AccountManagment Memory Issues

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm working on an active directory managament application. In addition to the typical Create A New User, Enable/Disable an account, reset my password etc. it also managages application permissions for all of the clients web applications. Application management is handled by thousands of AD groups… >>> More
List local administrators with System.DirectoryServices.AccountManagement doesn't retrieve domain us

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm trying to remotely list members of the local Administrators group. The following code returns only local accounts which are members of the admin group - no domain groups or individual accounts are returned at all (BLAH\Domain Admins or BLAH\yajohn, for instance). Anyone have an idea? Public… >>> More
AD - DirectoryServices: VBNET2.0 - Speaking architecture...

as seen on Stack Overflow - Search for 'Stack Overflow'
I've been mandated to write an application to migrate the Active Directory access models to another environment. Here's the context: I'm stuck with VB.NET 2005 and .NET Framework 2.0; The application must use the Windows authenticated user to manage AD; The objects I have to handle are Groups, Users… >>> More
Request a user's roles in AD when caller is not in domain

as seen on Stack Overflow - Search for 'Stack Overflow'
I would like to get a user's group memberships in an ActiveDirectory, without being in the domain. When I run this inside the domain, all is well. var context = new PrincipalContext(ContextType.Domain); var principal = UserPrincipal.FindByIdentity(context, IdentityType.Name, "administrator"); foreach… >>> More
DirectoryServices auth problem asp

as seen on Stack Overflow - Search for 'Stack Overflow'
Hello, I'm getting the following error [error] IIS://networth-web6/W3SVC/AppPools/netbasistest errorSystem.Runtime.InteropServices.COMException (0x80020006): Unknown name. (Exception from HRESULT: 0x80020006 (DISP_E_UNKNOWNNAME)) at System.DirectoryServices.DirectoryEntry.Invoke(String methodName… >>> More

Related posts about impersonation

Impersonation on IIS 7.0 passes the machine credentials for Crystal Reports

as seen on Server Fault - Search for 'Server Fault'
On a 32-bit Windows 2008 server running the Donor2 Application in the Classic .NET Managed Pipeline mode, configured for Windows Integrated Authentication and Impersonation, all of the .NET pages are passing the authenticated user’s credentials [DomainName\UserName]. This is the correct, expected… >>> More
Impersonation - Access is denied

as seen on Stack Overflow - Search for 'Stack Overflow'
I am having trouble using impersonation to delete a PerformanceCounterCategory from an MVC website. I have a static class and when the application starts it checks whether or not a PerformanceCounterCategory exists, and if it contains the correct counters. If not, it deletes the category and creates… >>> More
WNetAddConnection2 in Windows 7 with Impersonation and no Error Code

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm doing some crazy impersonation stuff to get around UAC dialogs in Windows 7 so the user does not have to interact with the UI (I have the admin creds of course). I have a process running as the Administrator and elevated past UAC. The issue that I'm facing is that when I make a call to WNetAddConnection2… >>> More
SQL Server Impersonation

as seen on Internet.com - Search for 'Internet.com'
SQL Server impersonation, or context switching, is a means to allow the executing user to assume the permissions of a given user or login until the context is set back, set to yet another user, or the session is ended. Deanna Dicken shows you two mechanisms for accomplishing this task and walks through… >>> More
Is an LSA MSV1_0 subauthentication package needed for some impersonation use cases?

as seen on Stack Overflow - Search for 'Stack Overflow'
Greetings, I'm working with a vendor who has implemented some code that uses a Windows LSA MSV1_0 subauthentication package (MSDN info if you're interested: http://msdn.microsoft.com/en-us/library/aa374786(VS.85).aspx ) and I'm trying to figure out if it's necessary. As far as I can tell, the subauthentication… >>> More