WindowsIdentity ?

[WJ]

Is there a way to modify WindowsIdentity.Name for System.Security.Principal
class at runtime after your app. successfully logs the user on the system
programmatically.

Thanks

John

 

[Paul Glavich [MVP - ASP.NET]]

Most ASP.NET applications (with the default policy) are not allowed to
modify the Principal. You can change this behaviour by going to the .Net
Framework 1.1 configuration (Administrative Tools), and selecting the
'Security' permission set for the internet zone. Within this, (by default),
the 'Allow Pincipal Control' is set to 'No'. Changing this to yes means your
ASP.NET app has the ability to now change the security principal, but
obviously this increases the 'surface area' of attack for any potential
malicous users to hack into your system.

 

[WJ]

Thanks Paul.

John

 

[Paul Wang]

But it is read-only.
How can i change 'Allow Pincipal Control' to yes

thanks