[cvsnt] Re: problem with domain users and impersonation

[Tony Hoyle]

Rolf Wilms wrote:


> However I'm not sure if this would work. Using the SSPI protocol (from the
> client to the CVSNT server) already doesn't work with option b). In this
> case, does the server use the SSPI protocol to authenticate the user
> (against the domain), or does it also use LogonUser here?

The SSPI authentication is pure SSPI, so if that doesn't work then mucking
around with SSPI locally won't work either...

> Or any other clue to avoid specifying the CVSNT server on that list of
> eight computers?

You could remove the interactive login right from the user, but that would
probably remove them from the domain entirely... I'm not sure it's possible
with NT4 domains - possibly Active Directory (although you'd have to ask an
MCSE as I'm not aware of such an option).

Tony