ASP.NET中模拟管理员用户提升权限

在asp.net的站点中需要调用本地EXCEL的COM组件,由于NetworkService用户的权限不够,在执行Shapes.AddPicture方法(图片大于33K左右)时会长时间无响应,需要用administrator用户来启动Excel进程才行。

上网查了一些资料,发现可以利用advapi32.dll来在asp.net应用中模拟administrator用户来启动Excel的进程,这样执行Shapes.AddPicture方法就正常了。

模拟用户的代码如下:

using System.Runtime.InteropServices;
using System.Security.Principal;
using System.Security.Permissions;


private const int LOGON_TYPE_INTERACTIVE = 2;
private const int LOGON_TYPE_PROVIDER_DEFAULT = 0;
[DllImport("advapi32.dll", CharSet = CharSet.Unicode, SetLastError = true)]
static public extern bool LogonUser(string userName, string domain, string password, int logonType, int 

logonProvider, ref IntPtr accessToken); 


public ExcelExport(string tableName)
{
    IntPtr accessToken = IntPtr.Zero;
    if (LogonUser("administrator", "domain", "password", LOGON_TYPE_INTERACTIVE, LOGON_TYPE_PROVIDER_DEFAULT, ref 

accessToken))
    {

        using (WindowsIdentity identity = new WindowsIdentity(accessToken))
        {
            using (WindowsImpersonationContext context = identity.Impersonate())
            {
                this.m_tableName = tableName;
                if (ExcelRS == null)
                {
                    ExcelRS = new Microsoft.Office.Interop.Excel.ApplicationClass();
                    ExcelRS.Visible = false;
                    ExcelRS.DisplayAlerts = false;
                    ExcelRS.Interactive = false;
                    ExcelRS.DisplayInfoWindow = false;
                }
            }
        }
    }
}
posted @ 2010-05-14 20:10  wang_yb  阅读(2700)  评论(0编辑  收藏  举报