EventLog access through ASP.Net app

Discussion in 'ASP .Net Security' started by JimN, Nov 25, 2003.

  1. JimN

    JimN Guest

    I have an ASP.Net app for which I want to be able to log
    events to the Windows 2000 server event log under a special
    log name. I encountered the initial security exceptionwhen
    I first tried this in code and then did some research on
    the subject. I think I've found two seperate ways to
    accomplish what I want to do:
    1. Use "sandboxing" by writing a class library in a
    strong-named assembly that I install in the GAC which I
    then call into from my ASP.Net app.
    2. Use wrapped Win32 API calls to perform impersonation,
    which, I understand, requires that I grant "Act as Part of
    Operating system" priviledge to the ASPNET user.

    Which do the users of this group suggest I use for the best
    security and portability to other, possibly new, Windows
    servers?
     
    JimN, Nov 25, 2003
    #1
    1. Advertising

  2. JimN

    Jeff Guest

    The easiest way is to just create the event log application as part of your
    installation. You do this by editing the registry and adding a key with the
    name of the application to
    HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application. You can find
    more info about doing this here:

    http://support.microsoft.com/default.aspx?scid=kb;en-us;329291

    Jeff

    "JimN" <> wrote in message
    news:038301c3b393$edfef7a0$...
    > I have an ASP.Net app for which I want to be able to log
    > events to the Windows 2000 server event log under a special
    > log name. I encountered the initial security exceptionwhen
    > I first tried this in code and then did some research on
    > the subject. I think I've found two seperate ways to
    > accomplish what I want to do:
    > 1. Use "sandboxing" by writing a class library in a
    > strong-named assembly that I install in the GAC which I
    > then call into from my ASP.Net app.
    > 2. Use wrapped Win32 API calls to perform impersonation,
    > which, I understand, requires that I grant "Act as Part of
    > Operating system" priviledge to the ASPNET user.
    >
    > Which do the users of this group suggest I use for the best
    > security and portability to other, possibly new, Windows
    > servers?
     
    Jeff, Nov 26, 2003
    #2
    1. Advertising

  3. Im exactly in same situation - trying to get EventLog & RegistryKey to be
    working for network computers: "access denied", because the WindowsIdentity
    passed to me does not have LOGON32_LOGON_NETWORK_CLEARTEXT flag... And I
    can't create my own identity, because at runtime I don't know credentials of
    the user, who uses my asp.net application...


    "JimN" <> wrote in message
    news:038301c3b393$edfef7a0$...
    > I have an ASP.Net app for which I want to be able to log
    > events to the Windows 2000 server event log under a special
    > log name. I encountered the initial security exceptionwhen
    > I first tried this in code and then did some research on
    > the subject. I think I've found two seperate ways to
    > accomplish what I want to do:
    > 1. Use "sandboxing" by writing a class library in a
    > strong-named assembly that I install in the GAC which I
    > then call into from my ASP.Net app.
    > 2. Use wrapped Win32 API calls to perform impersonation,
    > which, I understand, requires that I grant "Act as Part of
    > Operating system" priviledge to the ASPNET user.
    >
    > Which do the users of this group suggest I use for the best
    > security and portability to other, possibly new, Windows
    > servers?
     
    Juri Zenkevitch, Nov 26, 2003
    #3
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Joe
    Replies:
    1
    Views:
    572
    Thomas Kratz
    Sep 29, 2003
  2. =?Utf-8?B?Y2pr?=
    Replies:
    4
    Views:
    6,353
    nosperantos
    Nov 1, 2006
  3. Scott Zabolotzky
    Replies:
    0
    Views:
    754
    Scott Zabolotzky
    Apr 14, 2004
  4. Rob R. Ainscough

    How To: write to EventLog from .NET 2.0 web app?

    Rob R. Ainscough, Jun 7, 2006, in forum: ASP .Net
    Replies:
    7
    Views:
    6,682
    Q. John Chen
    Jun 8, 2006
  5. Scott Zabolotzky

    App can't write to EventLog on Windows Server 2003

    Scott Zabolotzky, Apr 16, 2004, in forum: ASP .Net Security
    Replies:
    5
    Views:
    427
    Scott Zabolotzky
    Apr 19, 2004
Loading...

Share This Page