Avatars and delegations

Question

I use the impersonation used to access the file on a UNC resource, as shown below.

  var ctx = ((WindowsIdentity)HttpContext.Current.User.Identity).Impersonate();
  string level = WindowsIdentity.GetCurrent().ImpersonationLevel);

On two Windows 2003 servers using IIS6, I get different impersonation levels: delegation on one server and impersonation on another server.

This causes problems when I cannot access the UNC shared folder on the server with the Avatar level.

What could be the reason for this difference? I searched for machine.config and IIS parameters for the application pool, sites and virtual directories, but could not find the cause of this problem.

Answer 1

, Active Directory, - . Network Service, , " " AD.

, AD , , Kerberos.

Answer 2

- , , ...,

Answer 3

, Impersonate(), , /:

• .
• .

() "" > " " > " " > " ", " " > " " .