"Matthew Wieder" <MatthewWieder@discussions.microsoft.com> wrote in message
news:DE970525-1EB3-4923-A6E1-C04770B86840@microsoft.com...
>I must be missing something since this seems like a common task, but I
>can't
> find any .NET samples of, if given an NT domain/username and password, to
> validate that the username and password are correct. LogonUser won't work
> since the code needs to run on Windows 2000 without admin priviledges. I
> would think there to be a .NET class for this purpose, but the only thing
> I've found is the SSPI example here
> http://support.microsoft.com/?id=180548
> using C++.

"Matthew Wieder" <MatthewWieder@discussions.microsoft.com> wrote in message
news:26F3D7BE-497C-4454-9746-60FDCF7E23A1@microsoft.com...
> The only examples I am able to see that use that class involve writing a
> server as well and validating the client against that server. I'm
> interested
> in validating against the NT domain - not my own server.
>
> "Joe Kaplan" wrote:
>
>> There is a wrapper in .NET 2.0 for SSPI-authenticated streams called
>> NegotiateStream. You might want to look around for some implementations
>> that demonstrate how to use it for that purpose.
>>
>> Joe K.
>>
>> --
>> Joe Kaplan-MS MVP Directory Services Programming
>> Co-author of "The .NET Developer's Guide to Directory Services
>> Programming"
>> http://www.directoryprogramming.net
>> --
>> "Matthew Wieder" <MatthewWieder@discussions.microsoft.com> wrote in
>> message
>> news:DE970525-1EB3-4923-A6E1-C04770B86840@microsoft.com...
>> >I must be missing something since this seems like a common task, but I
>> >can't
>> > find any .NET samples of, if given an NT domain/username and password,
>> > to
>> > validate that the username and password are correct. LogonUser won't
>> > work
>> > since the code needs to run on Windows 2000 without admin priviledges.
>> > I
>> > would think there to be a .NET class for this purpose, but the only
>> > thing
>> > I've found is the SSPI example here
>> > http://support.microsoft.com/?id=180548
>> > using C++.
>>
>>
>>

"Matthew Wieder" <MatthewWieder@discussions.microsoft.com> wrote in message
news:DE970525-1EB3-4923-A6E1-C04770B86840@microsoft.com...

> I must be missing something since this seems like a common task, but I
> can't find any .NET samples of, if given an NT domain/username and
> password, to validate that the username and password are correct.
> LogonUser won't work since the code needs to run on Windows 2000
> without admin priviledges. I would think there to be a .NET class for
> this purpose, but the only thing I've found is the SSPI example here
> http://support.microsoft.com/?id=180548 using C++.
>

"Dominick Baier" wrote:

> try this
>
> http://pluralsight.com/wiki/default.aspx/Keith.GuideBook/HowToGetATokenForAUser.html
>
> -----
> Dominick Baier (http://www.leastprivilege.com)
>
> Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp)
>
> > I must be missing something since this seems like a common task, but I
> > can't find any .NET samples of, if given an NT domain/username and
> > password, to validate that the username and password are correct.
> > LogonUser won't work since the code needs to run on Windows 2000
> > without admin priviledges. I would think there to be a .NET class for
> > this purpose, but the only thing I've found is the SSPI example here
> > http://support.microsoft.com/?id=180548 using C++.
> >
>
>