OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Steve Johnson (sjohnson3TSYSTEMS.COM)
Date: Tue Nov 13 2001 - 12:28:18 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    > is it easy to retrieve the userid/password of the COM+ identity
    > of a COM+ application?

    Depends upon what you call "easy", but I would say:
    As for the Username, it's pretty easy. The Username is stored in the
    "RunAs" value under the COCLASS's AppID key.

    As for the Password, it is stored in a portion of the registry accessible
    only to the LSA API's (LsaStorePrivateData/LsaRetrievePrivateData), so only
    a programmer with admin rights could access it.

    Steve Johnson
    3t Systems

    mailto://sjohnson3tsystems.com
    (303) 858-8800 x265

    ----------------------------------------------------------------
    Users Guide http://discuss.microsoft.com/archives/mailfaq.asp
    contains important info. Save time, search the archives at
    http://discuss.microsoft.com/archives/index.html .
    To unsubscribe, mailto:DCOM-signoff-requestDISCUSS.MICROSOFT.COM