Hi all,
I have a problem where I have to enable a service to impersonate a user to be able to check the security of his operation.
Basically what I am trying to do is to copy the security token of the user when I receive a read operation back to the service to impersonate him and verify that the user is allowed to do this operation.
I’ve tried changing the security in the service, but because I’m an domain admin and the “act as operating system” is disabled, I cannot grab the token of a user.
Also, I wouldn’t be able to grab the security token from user land for a network access, so I really need to get security token of the operation back up into my userland process…
I’ve been trying to grab the users token and insert it into the service to use for impersonating, but I always get invalid handles
Anybody have any hints on this?
thanks!