Hello all,

I have two different applications where my application wants to do something
the logged user has not the rights to:

1) Change a HKEY_LOCAL_MACHINE key value. The user has only Local\User
rights and I seem to need Administrator rights. Is it posible to grant in my
program (Windows .NET) temporaly local/administrator rights, knowing the
password. Or is there an other way around?

2) An analoge problem: I want to write a tool that enables/disables
site-access-rules on an ISA server that can be run by any serveroperator
without giving them permanent admin rights. (The other settings of the ISA
server may not been seen/modified by the user)

tnx in advance

Jean Paul

RE: Can I grant temp rights to a user in an application by KannanVMCADnet

KannanVMCADnet
Fri Nov 05 01:19:01 CST 2004

hi Jean,

this link might help you in changing security permission for code access.

http://blogs.msdn.com/shawnfa/archive/2004/09/09/227534.aspx

regds,
Kannan.V

"jean-dot-paul-at-opelwilly-dot-com" wrote:

> Hello all,
>
> I have two different applications where my application wants to do something
> the logged user has not the rights to:
>
> 1) Change a HKEY_LOCAL_MACHINE key value. The user has only Local\User
> rights and I seem to need Administrator rights. Is it posible to grant in my
> program (Windows .NET) temporaly local/administrator rights, knowing the
> password. Or is there an other way around?
>
> 2) An analoge problem: I want to write a tool that enables/disables
> site-access-rules on an ISA server that can be run by any serveroperator
> without giving them permanent admin rights. (The other settings of the ISA
> server may not been seen/modified by the user)
>
> tnx in advance
>
> Jean Paul
>
>
>

Re: Can I grant temp rights to a user in an application by jean-dot-paul-at-opelwilly-dot-com

jean-dot-paul-at-opelwilly-dot-com
Fri Nov 05 09:48:35 CST 2004

Kannan,

Tnx for reply,

Your sugestion don't not give me a solution. Even if I give 'full trust ' to
the application, the user rights limits my user to write to the LOCAL
MACHINE regkeys.

If I make him administrator there is not a problem but even SuperUsers can't
access the reg.

If you, or others, happens to have more idee's, let them come

Jean Paul
-------------------------------------------------------------------------------------
C# is Second finger high on the A


"Kannan.V [MCAD.net]" <KannanVMCADnet@discussions.microsoft.com> schreef in
bericht news:F3B8043A-0A11-4A8C-8AB0-34E7B599CC64@microsoft.com...
> hi Jean,
>
> this link might help you in changing security permission for code access.
>
> http://blogs.msdn.com/shawnfa/archive/2004/09/09/227534.aspx
>
> regds,
> Kannan.V
>
> "jean-dot-paul-at-opelwilly-dot-com" wrote:
>
>> Hello all,
>>
>> I have two different applications where my application wants to do
>> something
>> the logged user has not the rights to:
>>
>> 1) Change a HKEY_LOCAL_MACHINE key value. The user has only Local\User
>> rights and I seem to need Administrator rights. Is it posible to grant in
>> my
>> program (Windows .NET) temporaly local/administrator rights, knowing the
>> password. Or is there an other way around?
>>
>> 2) An analoge problem: I want to write a tool that enables/disables
>> site-access-rules on an ISA server that can be run by any serveroperator
>> without giving them permanent admin rights. (The other settings of the
>> ISA
>> server may not been seen/modified by the user)
>>
>> tnx in advance
>>
>> Jean Paul
>>
>>
>>



RE: Can I grant temp rights to a user in an application by Dave

Dave
Fri Nov 05 14:58:03 CST 2004

Hello Jean Paul

I think you said that you know the administrator account credentials, so you
could impersonate that account, see link:

http://support.microsoft.com/kb/306158/EN-US/

Dave

"jean-dot-paul-at-opelwilly-dot-com" wrote:

> Hello all,
>
> I have two different applications where my application wants to do something
> the logged user has not the rights to:
>
> 1) Change a HKEY_LOCAL_MACHINE key value. The user has only Local\User
> rights and I seem to need Administrator rights. Is it posible to grant in my
> program (Windows .NET) temporaly local/administrator rights, knowing the
> password. Or is there an other way around?
>
> 2) An analoge problem: I want to write a tool that enables/disables
> site-access-rules on an ISA server that can be run by any serveroperator
> without giving them permanent admin rights. (The other settings of the ISA
> server may not been seen/modified by the user)
>
> tnx in advance
>
> Jean Paul
>
>
>