Question

My application runs on windows XP restricted user account. The application needs Domain Name, Admin User ID, Admin Password in order to work out with Impersonation class for executing some piece of code with admin privileges. The Admin will also change the Password every 90 days.

Due to security reasons, i cannot maintain the admin credentials in my app.config file.

What else would be best idea ?

Answer 1

Here are a couple of ideas:

• Prompt the user for the credentials each time the app starts.
• Encrypt the credentials in the app.config using a strong encryption algorithm such as AES. For the encryption key, prompt the user each time the app starts. Use this key to encrypt / decrypt the credentials.