You cannot impersonate the server service that is the SRV process. You can
impersonate the Windows machine on which the server service is running. You
need go to your domain controller to set the impersonation.
Regards,
Shangwu
“fc” wrote in message news:xxxxx@ntfsd…
> ShangWu has went through this problem. It is SRV on A open the stub file
> on SRV B. SRV B will redirect the open to SRV C. the filter driver at SRV
> B will get the access denied message. Bruno has posted the solution as
> follow:
>
> Shangwu,
>
> You have an impersonation-level problem going from SRV on machine B to SRV
> on machine C. SRV on B sets the ImpersonationLevel in the
> create thread’s security impersonation token to SecurityImpersonation,
> which
> is insufficient for going across the network to machine
> C. You need the SRV on B to set ImpersonationLevel to SecurtityDelegation.
>
> This article explains how you accomplish that:
> http://msdn.microsoft.com/library/default.asp?url=/library/en-us/secmod/html/secmod19.asp
>
>
> Bruno Sartirana
>
> I follow the link but I do not know how to set the SRV on B the
> ImpersonationLevel to SecurityDelegation from the Administration tools. Do
> I need to set it from filter driver? If it needs to set from filter
> driver, what kind of function should I use? It needs to run on both server
> Windows 2003 and Windows 2000. Please give me the help. Thanks.
>
> fc
>
>
>
>