Search code examples
asp.netiis-7.5impersonation

Calling WindowsIdentity.Impersonate does nothing

I'm using the following Microsoft example. Every time the WindowsIdentity instance calls .Impersonate(), nothing happens. No error, no impersonation.
Both before and after the call, the current identity is always the AppPool identity.
I've also tried another example found online, the Impersonator class, and the same thing happens.

The only modification I've made to those examples is changing LOGON32_LOGON_INTERACTIVE to LOGON32_LOGON_NETWORK in the LogOnUser call, since using Interactive always returned a 0 error.

It's an ASP.NET 4.0 app running on a Win2k8 server trying to impersonate a user in AD.

EDIT: I hadn't mentioned this originally, but I modified the Microsoft example and turned it into a class so that I can could it from my ASP.NET app. I also have impersonate=true in web.config.

Solution

  • Giving write access to the App_Data folder for the Users group fixed the issue. Not sure what that has to do with impersonation though.