1

Topic: How to span the rights to a file from a desktop in service?

Situation in the following: starts service together with system under the user "localsystem", in the user session application which opens a file with network full-spheres is started, for access to a full-sphere the user enters the domain login and the password. The file should be opened and read in service which receives 1326 logon failure. What to do?!

2

Re: How to span the rights to a file from a desktop in service?

Hello, ksd, you wrote: ksd> a situation in the following: starts service together with system under the user "localsystem", in the user session application which opens a file with network full-spheres is started, for access to a full-sphere the user enters the domain login and the password. The file should be opened and read in service which receives 1326 logon failure. What to do?! Variants: after discovery of a file by application to receive a descriptor in service by call DuplicateHandle (..., DUPLICATE_SAME_ACCESS) before file discovery in service to impersonate a thread of service by an application token