WMI--Windows API--RPC_C_IMP_LEVEL_xxx

原文来自MSDN Library for Visual Studio 2008 SP1，翻译部分仅为个人观点，想要看更多信息请看MSDN，如有版权问题请联系QQ 643166601，邮件[e-mail]

 

COM
RPC_C_IMP_LEVEL_xxx
See Also  

Used in the security functions and interfaces to specify an impersonation level, which indicates the amount of authority given to the server when it is impersonating the client.
用于安全函数中和接口指定一个模拟等级，当它是模拟客户端时指示给服务器的权利的数量。

  Copy Code
#define RPC_C_IMP_LEVEL_DEFAULT       0
#define RPC_C_IMP_LEVEL_ANONYMOUS     1
#define RPC_C_IMP_LEVEL_IDENTIFY      2
#define RPC_C_IMP_LEVEL_IMPERSONATE   3
#define RPC_C_IMP_LEVEL_DELEGATE      4
 

Values
RPC_C_IMP_LEVEL_DEFAULT
Tells DCOM to choose the impersonation level by using its normal security blanket negotiation algorithm.
告诉DCOM使用它的正常安全的安全指针协商算法去选择模拟等级。
This value can be used with Windows 2000 and later versions.
这个值可以在Windows 2000 和更高的版本中使用。
For more information, see Security Blanket Negotiation.
更多信息，请看 Security Blanket Negotiation。

RPC_C_IMP_LEVEL_ANONYMOUS
(Not supported in this release.) The client is anonymous to the server.
(在这个发行版本中不支持。)这个客户端是匿名的连接服务器。
The server process can impersonate the client, but the impersonation token will not contain any information and cannot be used for anything.
这个服务器进程可以模拟客户端，但是模拟令牌环将不能包含任何信息并且不能使用任何东西。

RPC_C_IMP_LEVEL_IDENTIFY
The server can obtain the client's identity.
这个服务器可以获得客户端的身份。
The server can impersonate the client for ACL checking, but it cannot access system objects as the client.
这个服务器可以模拟客户端的ACL检查，但是不能作为客户端访问系统对象。

RPC_C_IMP_LEVEL_IMPERSONATE
The server process can impersonate the client's security context while acting on behalf of the client.
这个服务器进程可以模拟客户端的安全上下文同时扮演客户端的支持。
This level of impersonation can be used to access local resources such as files.
可以使用这个等级的模拟去访问本地资源如文件。
When impersonating at this level, the impersonation token can only be passed across one machine boundary.
当模拟这个等级时，这个模拟令牌环只可以通过一台机器边界传递。
The SChannel authentication service only supports this level of impersonation.
这个SChannel身份验证服务器只支持这个等级的模拟。

RPC_C_IMP_LEVEL_DELEGATE
Supported for Windows 2000 and later versions.
支持Windows 2000和更高版本。
The server process can impersonate the client's security context while acting on behalf of the client.
这个服务器进程可以模拟客户端的安全上下文同时扮演客户端的支持。
The server process can also make outgoing calls to other servers while acting on behalf of the client, using Cloaking.
这个服务器进程也可以生成到调用其他服务器同时扮演客户端的支持，使用Cloaking。
The server may use the client's security context on other machines to access local and remote resources as the client.
这个服务器可以使用在其他机器上的客户端的安全上下文去作为客户端访问本地或远程资源。
When impersonating at this level, the impersonation token can be passed across any number of machine boundaries.
当模拟在这个等级时，这个模拟令牌环可以通过任意数量的机器边界传递。

Comments
Only the RPC_C_IMP_LEVEL_IDENTIFY and RPC_C_IMP_LEVEL_IMPERSONATE levels are supported in Windows NT 4.0.
在Windows NT 4.0中只支持RPC_C_IMP_LEVEL_IDENTIFY 和 RPC_C_IMP_LEVEL_IMPERSONATE等级。
In Windows 2000 and later, RPC_C_IMP_LEVEL_DELEGATE is supported as well.
在Windows 2000和更高的，也支持RPC_C_IMP_LEVEL_DELEGATE。

GetUserName will fail while impersonating at identify level.
模拟在身份等级同时GetUserName将失败。
The workaround is to impersonate, OpenThreadToken, revert, call GetTokenInformation, and finally, call LookupAccountSid.
这个工作区是去模拟OpenThreadToken，恢复，调用GetTokenInformation，和最后调用LookupAccountSid。

Using CoSetProxyBlanket, the client sets the impersonation level and proxy identity that will be available when a server calls CoImpersonateClient.
当服务器调用CoImpersonateClient时，使用CoSetProxyBlanket在客户端设置模拟等级和代理身份将是可能的。
The identity the server will see when impersonating takes place is described in How Cloaking Affects Client Identity.
这个服务器将看到，当发现模拟发生在伪装如何影响客户端身份。
Note that when making a call while impersonating, the callee will normally receive the caller's process token, not the caller's impersonation token.
注意当生成调用同时模拟，这个被调用将正常接收调用者的进程令牌环，不是调用者的模拟令牌环。
To receive the caller's impersonation token, the caller must enable cloaking.
去接收调用者的模拟令牌环，调用者必须启用伪装。
Requirements
For an explanation of the requirement values, see Requirements (COM).

Windows NT/2000/XP: Requires Windows NT 3.1 or later.

Windows 95/98: Requires Windows 95 or later.

Header: Declared in rpcdce.h.

See Also
Reference
CoInitializeSecurity

Concepts
Cloaking and Impersonation Levels

Send comments about this topic to Microsoft.