Posts in microsoft.public.dotnet.security

"Unknown Publisher" alert on XP with Microsoft Fir ...  Replies (1) 26 November 2007
Hi, I have an application that is comprised of: A main executable Some dynamically loaded dlls The application sets up a server listening on a port (9xxx). I have tried signing all of the fil...

Have WCF Callback notify a single client ?  Replies (1) 26 November 2007
Hello, Was wondering how or if this is possible - assuming the use of FullDuplex, but open to whatever works well. Goal: Have x number of clients subscribe to a WCF fullduplex over tcp servic...

WebPermission.Demand() is failing with membership ...  Replies (2) 25 November 2007
hi, I'm trying to run an assembly in internet explorer (local mode - smart client architecture). I need to secure the running, so the first step is protecting the URL. In .net framework 2.0 config...

Security and Folder/file Permissions  Replies (1) 24 November 2007
Running VISTA Home. Only one user defined (me) and in the user accounts I see me as an administrator. When I attempt to rename a folder in programs files/common files - i get permission denied. ...

Intel(R) Active Management Technology and MS Authe ...  Replies (1) 23 November 2007
This post is just for future reference in case people hit the same problem as my current company did. A partial work around was found after a long MSDN Support call. There is currently an incom...

Please help : Security exception when running app ...  Replies (1) 23 November 2007
Hi, I have an application, which consists from main exe and several dll. if I install it with the setup kit I made fcrom VS, all works ok But I need to share the folder it was installed into, and...

Accessing DirectorySecurity for local c$ share - 1 ...  Replies (1) 21 November 2007
I am using .NET 3.5 and accessing a local share DirectorySecurity ds = Directory.GetAccessControl("\\\\127.0.0.1\\c$\\test"); But this gives an exception error of 1265 at System.Security.A...

DSA public key PEM format  Replies (1) 20 November 2007
I am having difficulty to convert public key to PEM format. I use DSACryptoServiceProvider class to obtain the public key blob. DSACryptoServiceProvider dsa = new DSACryptoServiceProvider(...

Reading from personal certificate  Replies (1) 19 November 2007
I'm trying to get the Friendly Name from the certificate store but neither the X509CertificateCollection nor the X509Certificate class have any friendly name in it anywhere. I'm using .NET 1.1. ...

Disabling security on a wireless  Replies (1) 17 November 2007
Would like to disable the security feature on the wireless for a short period of time. Can anyone help me with this? -- Barbara...

user.identity.name  Replies (1) 16 November 2007
I'm building an app on our local intranet.... I can pull the network ID through -User.Identity.Name Once I have this can I use this, or a token, or LDAP, Active Directory.... to find out more ...

Send custom IPrincipal object from client to WCF s ...  Replies (3) 15 November 2007
We are trying to do something that doesnt appear to be possible. Simply this: We create a IPrincipal object on the client based on a custom class that holds info we need for auditing (ip, work...

Enforce specific client certificate on WCF service  Replies (2) 14 November 2007
This is driving me nuts. I would like to secure my WCF service using certificates but I would like to define which certificates have access, preferably configurably since each of my deployment en...

Got error with SetInfo on one server but not other ...  Replies (2) 14 November 2007
I have a COM component that is a ext property page in AD users and computers snap-in. I'm testing on different virtual machine and I'm getting error in one of the vm installed Win2000 server sp4 ...

calling fully trusted assembly from partially trus ...  Replies (2) 11 November 2007
Hi, Is it possible to call a fully trusted code that performs actions that the partially trusted appDomain running code is not allowed to run? Here is my scenario: 1. create an appDomain whic...

internet acces permission  Replies (1) 11 November 2007
Dear Sir. Good Mornign, im new in this office but here one thik that i cant undrastad can u help me. problems is internet acces perminsio, this is a call center and here using window serv...

RSACryptoServiceProvider hangs if Domain controlle ...  Replies (2) 9 November 2007
I use RSACryptoServiceProvider.VerifyData to verify a digital signature. The public key is loaded with RSACryptoServiceProvider.ImportCspBlob and SHA1CryptoServiceProvider is used. I have some Win...

Australian Standard AS2805.5 DES encryption  Replies (1) 9 November 2007
Anyone ever had to implement the data encryption algorithm as defined in the Australian Standards document AS2805.5? I need to use this as part of the authentication process for a project I'm work...

NTLM Windows Authentication + group account + poor ...  Replies (1) 7 November 2007
Hi, ~ I inherited two computer labs in a school (adult ed) with 28 desktops running Windows XP SP2 which are part of the same network ~ All 28 computers use the same group account to login and ...

CryptographicException  Replies (1) 7 November 2007
I get a CryptographicException on my website a few times a day. Does that have anything to do with a corrupt authentication cookie? -- Arne Garvander Certified Geek Professional Data Dude...

Security Error running .Net Application  Replies (1) 4 November 2007
Hi there, Hopefully this is the right place to ask this question. I am trying to create an application as a windows service and run it under a service account. I get error messages similar...

Need help with error adding meetingBlob to a meeti ...  Replies (1) 2 November 2007
I got the following error: System.ArgumentException: Value does not fall within the expected range. At System.DirectorySservcies.Interop.UnsafeNativeMethods.IAds.PutEx(Int32 InControlCode, Strin...

Validation of viewstate MAC failed .. Security iss ...  Replies (1) 1 November 2007
Hi, I come from an ASP background, and I am currently working on a .NET project, so please excuse me if this is a dumb question ... I have written a dynamically generated menu that uses the fol...

httpwebrequest failure with .net service  Replies (6) 31 October 2007
running Hi, I have a .net 2.0 service that periodically needs to access a web site on the same 2003 server machine that is configured to use https . The only way I can get this working is to ...

Accessing a network share from ASP.NET  Replies (2) 31 October 2007
When I need to access a file on a network share from web page I use LogonUserA Lib "advapi32.dll" to impersonate a network user. Login name and password of that user is in the code Is this best pr...

ServiceController - Requied User Permissions  Replies (1) 31 October 2007
I want to use a ServiceController instance to control a service on another machine. I find I can only do so by making myself an Administrator on that machine. I need to know the specific set of u...

Generating Certificate in .NET 2.0  Replies (1) 30 October 2007
Hi evevryone, I have one requirement here, where i have to create a utility/program which will use certificates for securing web service communication between the client and web service to verify...

Impersonation with users of 2 domain (not trusted) ...  Replies (1) 29 October 2007
Hi guys, I'm trying to solve this problem: in my software I need to use files that are in different machine of 2 domain at which I could access using different user rights. If the software run o...

FromBase64Transform InputBlockSize property issue  Replies (1) 29 October 2007
In the .NET ?documentation? for FromBase64Transform class, the example comments out all use of the InputBlockSize property and replaces it with the constant "4". For example: [C#] myTransfo...

Integrated Security/Trusted_Connection  Replies (1) 29 October 2007
I want to make a trusted connection from a webserver (IIS 6.0/5.1) to a sql server (2005) How do I do that ? -- Arne Garvander Certified Geek Professional Data Dude...

Offline Root CA issue  Replies (2) 29 October 2007
I have setup a standalone offline root CA (part of the domain), and a subordinate online CA server in an Windows 2003 Server environment (virtual servers). I have exported the CRL from the offline...

trusted security  Replies (1) 29 October 2007
I put this line in my web.config I change the identity used by IIS. Now I can connect to SQL server using trusted_security. I got trusted by SQL server, but I am not trusted by the filesystem out...

Finding Certificates  Replies (1) 28 October 2007
Hello All, I am trying to find a certificate but I am unable to find the certificate that I want. I am using the following code: ... string SearchTerm = "XXXXXXXXXXX"; X509Store oX509Stor...

Possible to restrict IP address access using ACLs?  Replies (2) 26 October 2007
I'm in the process of writing a WinForms application that will allow viewing MJpeg streams from 30+ ip cameras located throughout our facility. None of the cameras will be accessable via the intern...

TRYING TO NOT ALLOW USE OF EXTERNAL HARD DRIVE TO ...  Replies (1) 26 October 2007
MY I: DRIVE OR MY EXTERNAL HARD DRIVE IS SHOWING ON ALL USERS. I WANT TO MAKE IT WHERE I AM THE ONLY USER THAT CAN ACCESS IT, CAN ANYONE HELP HERE? THE OTHER ACOUNTS ARE LIMITED BUT YOU CAN STILL ...

Tray Client  Replies (1) 25 October 2007
I keep getting an error message the "You have another Tray Client logged on using this account from another computer" What does this mean and how do I remedy?...

Web Forms Login  Replies (1) 25 October 2007
Hello, I am redesigning our companies intranet site and I want to make it as easy as possible for our users to log in and get to the tools they need. I have the need for a number of Web Applica...

403 forbidden  Replies (1) 24 October 2007
403 Forbidden You don't have permission to access /gboek/inloggen.php on this server. Apache/1.3.29 Server at www.i-net.be Port 80 ????????? It worked always to access this free guestbook , ...

Certificate Revocation List and Proxy/Firewall  Replies (1) 22 October 2007
Hi, I've to validate a X509 certificate before signing a file on a client. I'm using a ClikOnce application to verify and sign. In the certificate, the CDP points to some http url (not ldap uri); I...

Prompt for domain login  Replies (1) 21 October 2007
Hi I have a web application that uses Windows integrated security. In some cases (approval scenarios that requires high security) i need to prompt the user for a new domain login, even though t...

Checking for AD rights in a Stored Procedure  Replies (1) 19 October 2007
We have a stored procedure which should return different rows depending on which AD groups you are a member of. Do you have any idea of how to check for AD rights in a stored procedure? I would...

Cant Create Instance of IE7 Via IIS 7 (I think sec ...  Replies (1) 19 October 2007
Has anyone tried this? I know back in the day I was able to do this in IIS 5.x and greater I know the security model in both IIS 7 and vista have changed greatly. However I cant not do some of the...

Specified key is a known weak key for (encryption ...  Replies (1) 19 October 2007
Dear Group I'm trying to calculate a Message Authorisation Code for a stream of data, using the following code: byte[] tripleKey = new byte[key.Length * 2]; for(int i = 0; i < ke...

Got error w/DirectoryEntry.RefreshCashe on a DC bu ...  Replies (1) 19 October 2007
Hi, I'm using VS 2005, .net 2 and C# for a windows application. Let's say I'm running from loggin into a domain controller DC1. I have a treeview and nodes representing a DirectoryEntry object. ...

Cannot access the private key of a local machine c ...  Replies (1) 17 October 2007
Hi everyone, I met a problem when accessing the private key of a local machine certificate which is installed by another user. My software evr is win xp sp2 + v c# 2005 express + .net 3.0, ...

EnvelopedCMS and SignedCMS slow due to generated N ...  Replies (1) 17 October 2007
Hello everyone, my implemented cryptographic functions perform very slow on certain Windows XP machines. When I pull out the network cable or take the machine out of the domain, everything work...

Cannot access the private key of a local machine c ...  Replies (1) 17 October 2007
Hi everyone, I met a problem when accessing the private key of a local machine certificate which is installed by another user. My software evr is win xp sp2 + v c# 2005 express + .net 3.0, seem...

Problem with nested AD-groups  Replies (1) 16 October 2007
I am involved in a MOSS 2007 project. Authenticating users is done with Active Directory. The MOSS webapplication is on a domain and is using Windows Authentication. Sample: GroupA (an AD-grou...

SQLClientPermission problem  Replies (1) 14 October 2007
This is driving me dotty . . . I have written some C# code that accesses a SQL Server database. I have 2 machines. The database is on Machine 1. If I run my code on Machine 1 it works fine. I...

HP Desktop for sale!  Replies (1) 14 October 2007
Hi, I have an unused HP Pavilion with the fallowing specs: # Processor: AMD Athlon 64 X2 4000+ (2.1GHz, 2000MT/s System Bus) # Memory: 2048MB PC2-5300 DDR2 SDRAM memory (2x1GB) (expandable to 8 G...