Vulnerability Development: Re: ImpersonateNamedPipeClient -- "How Named Pipe Security Works"

[Matt Conover <shok () CAMEL ETHEREAL NET>]

I have a follow up message that I'm still waiting to go through, but
yes.  I verified with some people here that you can only impersonate a
client with an account on the machine (these can be through the
domain--i.e., if you look at your user manager and you're in the domain,
you'll see things like DOMAINNAME\username.  If they aren't in the list of
users, you can't impersonate them--there are *no* exceptions to this.

Matt