permissions - Can ASP.NET Impersonate a user to Delete a Performance Counter Category? -


I believe that I successfully copied my own user account while running ASP.NET page on my local machine Have done

By using the described method, I have successfully changed the WindowsIdentity.GetCurrent (). from ASPNET in my domain account

I can successfully write a file on the file system that is only allowed to access my account However, when I try to delete a display counter category, then I'll be able to access denied < / Em>.
I have an auditing on the branch of the registry and letting me know that MyMachine \ ASPNET object is failing

.

Here is the code that is failing:

  if (PerformanceCounterCategory.Exists (PerfmonCategory)) PerformanceCounterCategory.Delete (PerfmonCategory);  

This failed on deleted calls.

(My account is administrator and I can run the same code successfully outside the ASP.NET reference).

I doubt this system Diagnostics name space call is actually calling some com process and in some way I am being bounced due to the second hop. Can anyone be confirmed what is happening?

Edit: Exception: Login is denied Description: An unwanted exception has occurred during the execution of existing web requests. For more information about the error, review the stack trace and where it started in the code.

Exception Description:

System.ComponentModel.Win32Exception: Access is denied

Running under complete trust.

You can run it on your application, its own application pool (always a good thing) and it Assign proper rights to a service user, thus you do not have to mess with cloning.


Comments