Passing Access Tokens across processes

[Abhishek]

Hi,
Can I pass the access token (HANDLE to a token returned by
OpenProcessToken) from one process to
another process, so that the other process impersonates the user and
performs operations on the other process
behalf.
i.e Lets say I have a process 'A' and process 'B'. The process A wants to
delegate some of its responsibility
to process 'B'. Process 'B' wants the user credentials of process 'A' to
perform those tasks.
Question: Can process 'A' pass on its credentials to process 'B' to perform
those tasks. If YES, how?

Thanks.

 

[Dmitrii S. Zakharov [MSFT]]

Hi,

these are 3 apis you can use
http://msdn.microsoft.com/library/en-us/security/security/impersonateclient.asp?frame=true
http://msdn.microsoft.com/library/d...urity/security/impersonatesecuritycontext.asp
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/com/htm/cmf_a2c_6mwk.asp

or you can just pass username/domain/password info from one process to
another and do LogonUser()
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/security/security/logonuser.asp
you will have to invent your own way of passing the credentials though

-Dmitrii