I have an ASP.NET app that writes an Excel file out to a subdirectory within
the root web and then emails it out as an attachment. If I have the
<identity impersonate="tr ue"/string in the web.config file then there is no
error. However because that was interfering with other areas of the app that
used Active Directory I had to take that identity string out of web.config
and instead set impersonation programmactical ly just before file creation and
remove impersonation after file creation. So the problem is this: when a
user who is not in the local admins group of the web server requests this
file creation function, they get an "access denied" error. If they are in
the local admin group of that box then everything works fine. Obviously I
don't want to add a bunch of people as local admins. What am I doing wrong
and is there a way I can get over this problem?
Thanks in advance,
Steve.
the root web and then emails it out as an attachment. If I have the
<identity impersonate="tr ue"/string in the web.config file then there is no
error. However because that was interfering with other areas of the app that
used Active Directory I had to take that identity string out of web.config
and instead set impersonation programmactical ly just before file creation and
remove impersonation after file creation. So the problem is this: when a
user who is not in the local admins group of the web server requests this
file creation function, they get an "access denied" error. If they are in
the local admin group of that box then everything works fine. Obviously I
don't want to add a bunch of people as local admins. What am I doing wrong
and is there a way I can get over this problem?
Thanks in advance,
Steve.