iis security: Hi,

I have an app pool running as a domain user but I need to make a
certain call in the context of NT AUTHORITY\NETWORK SERVICE. I've
tried using LogonUser() but I'm not sure if it's possible.

Is there anyway to temporarily change from a domain account to the
network service account?

Hi Ryan,

In your configuration, you cannot get a Network Service token.

To get a token for the Network Service account, you must be running as local
system, and then you can call LogonUser for the Network Service account with
no password and logon type LOGON32_LOGON_SERVICE.

Note that this is not really an IIS question. If you would like further
information on creating your own token for the Network Service account, you
might try a newsgroup dedicated to Win32 security programming.

Thank you,
-Wade A. Hilmo,
-Microsoft

[quoted text, click to view]