search

rlwakefield / CoMaCon

GNU General Public License v3.0
0 stars 0 forks source link

Need to make the aspnet_setreg.exe file part of platform #30

Open rlwakefield opened 4 weeks ago

rlwakefield commented 4 weeks ago

So one of the things with impersonation is that you use the aspnet_setreg.exe executable from Hyland in order to do so. However, what seems odd to me is the fact that this utility is used when it only writes to the WOW6432 registry location since it is a 32-bit executable (according to some Google'd responses). So might need to investigate this one a little bit more.

rlwakefield commented 4 weeks ago

So apparently the tool is installed as part of the Web Client (or any other IIS) installation. However, it is in the "C:\Program Files (x86)\Hyland\aspnet_setreg" folder. So the next steps that I need to do is figure out how to make the aspnet_setreg.exe file part of this solution.

Also need to add additional configuration and variable checks.

  1. If the application pool is configured to use the built-in ApplicationPoolIdentity account, then the IIS_IUSRS group must be granted Read access to the registry key. "HKLM:SOFTWARE\Wow6432Node\Hyland(YourApp)\Identity\ASPNET_SETREG" (64-bit environments)
  2. Still determining if the "YourApp" section is something that is configurable or not.
  3. Need to verify if this registry location needs to be in the non WOW6432Node registry location or not.

Will add more comments and thoughts as I think of more.