Re: Swapping profiles in Windows

Funny you should ask... I was just working on a problem that requires
this.

You can "swap" profiles in Windows in a number of ways. All involving
the Win32 APIs, although there are some .Net classes that make some of
this a little less painful if you're developing with .Net.

Here's a partial list. You can search MSDN for details.

LogonUser
ImpersonateUser
CreateProcessAsUser
CreateProcessWithLogonW
DuplicateToken
LookupAccountName
LookupPrivilegeValue
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
AdjustTokenPrivliges
ChangeOwnerOfFile

It really depends on what you are wanting to do, and what your target
operating system is.  Windows 2000 works differently than Windows 2003
Server. Windows XP works mostly like Windows 2000.  If you still have
users running NT 4.5, then you have some additional considerations to
make.

 HTH

Shannon O'Donnell

-----Original Message-----
From: pctech-bounces+shannon.odonnell=customcall.com@xxxxxxxxxxxx
[mailto:pctech-bounces+shannon.odonnell=customcall.com@xxxxxxxxxxxx] On
Behalf Of Nick Blattner
Sent: Thursday, October 19, 2006 5:35 PM
To: pctech@xxxxxxxxxxxx
Subject: [PCTECH] Swapping profiles in Windows

My company created an application that uses the swap profile api's
(QSYGETPH and QWTSETP) to help administrators control powerful profiles.
It works very well as long as the user is running applications on an
AS/400_iSeries_System i.  I've been asked if there is there a way to
accomplish the same thing in a Windows network environment.
 
For instance,  a web based application retrieves iSeries data and lets
the user read or change the data.  The user's Windows profile is used to
determine their rights,  not their OS/400 profile.  The web application
has it's own security scheme to assign 'read' rights or 'change' rights
even though they have 'change' rights to the data on the iSeries.    Is
there a way in Windows to 'swap' a Windows user id to another profile to
address this situation?  
 
Regards,
 
Nick Blattner