access user's local machine's info

Hi,

Is that possible we can implement something in ASP.NET to access user's local machine's info, such as MAC# or Hard Drive #? Thanks.
Chia
0
chiachen
10/23/2003 1:27:37 AM
asp.net.security 27051 articles. 1 followers. Follow

16 Replies
683 Views

Similar Articles

[PageSpeed] 45

Nope. Or, more specifically, I hope not. This would be a major, huge security breach.

The best you could do is to embed an ActiveX or .NET component in the page, convince the user to install it, and get the info that way. This would only be reasonable in an intranet situation. But you'd have to install it independently of the ASP.NET page before you could use it.
Don
Don Kiely, MCP, MCSD
In the Last Frontier, Interior Alaska
Please post questions and replies to the forum! And remember to MARK AS ANSWER when someone definitively answers a question or resolves a problem!
0
donkiely
10/23/2003 4:42:49 PM
Actually, that's the answer I expected.  Thanks.

Since, we will set up our customer's machine individually, I think there is no problem to install Active X or .NET component. But, could you provide more info about any available Active X or .NET component can help with this issue?
Chia
0
chiachen
10/23/2003 5:07:34 PM
Do you mean a third party product? I don't know of any, but I've never looked. It would be easy enough to do on your own.

Don
Don Kiely, MCP, MCSD
In the Last Frontier, Interior Alaska
Please post questions and replies to the forum! And remember to MARK AS ANSWER when someone definitively answers a question or resolves a problem!
0
donkiely
10/23/2003 5:40:17 PM
It might be easy.  However, I am new with ASP.NET and have no experience with Active X control.  Could you point me any reference?  Thanks.


Chia
0
chiachen
10/24/2003 1:11:25 AM
What programming environment do you know that can create ActiveX controls? VB 6? C++? C? Delphi? It's just a matter of creating a control that can access the Win32 API to get the information and installing it on the client machines.

Are you familiar at all with creating or using ActiveX components? You could also do it with a .NET component that you also create a COM type library for, which IE can then run. Even with today's tools, you'll need to learn a lot in order to implement this solution if you have zero experience with them.
Also, are all your customer's users running IE? They'll have to be for this to work.
Don
Don Kiely, MCP, MCSD
In the Last Frontier, Interior Alaska
Please post questions and replies to the forum! And remember to MARK AS ANSWER when someone definitively answers a question or resolves a problem!
0
donkiely
10/25/2003 3:02:09 PM
Thank you for such valuable information.

However, I have zero experience with ActiveX components. I tried to check out several books and web sites. I couldn't find enough information to start implementing .NET component to access user's local machine. Do you happen to know any book or site I can learn how to do this? Thank you so much.
Btw, I believe our customer's are all running IE.
Chia
0
chiachen
10/28/2003 6:15:01 PM
I have developed an ActiveX control using VB6.  However, when I embed this control to my web page, this error message shows,

"An ActiveX control on this page might be unsafe to interact with other parts of the page. Do you want to allow this interaction?"
I even downloaded codesigning utility program to get digital signature, but it doesn't help.

Chia
0
chiachen
11/6/2003 1:59:53 AM
when the error prompt, just click yes, then ur activex in on the fly...
0
sweekian
11/6/2003 9:38:47 AM
Chia,

You're always going to get that message box. You WANT that message box. There is no way to avoid it unless the user makes a very foolish setting within IE. It is there as a simple way to prevent viruses to enter a user's machine through an ActiveX control.
Don
Don Kiely, MCP, MCSD
In the Last Frontier, Interior Alaska
Please post questions and replies to the forum! And remember to MARK AS ANSWER when someone definitively answers a question or resolves a problem!
0
donkiely
11/8/2003 8:56:51 PM
hello

Another solution to retrieve the information you want from your client's pc, is to write a client side VBScript (or JavaScript) function that uses WSH (Windows Script Host) or WMI (Windows Management Instrumentation) to placed the required information in a form which is then submited to you.
These COM objects will also require an autorization from the client to run (i.e. they have to click on 'yes'), but note that no code (i.e. ActiveX components) will be installed on the client's PC.
Hope this Helps

Dinis Cruz

..NET Security Consultant

DDPlus (www.ddplus.net)
0
ddplus
11/10/2003 11:31:36 AM
Don,

I was expecting the message to ask user if they want to install the ActiveX control, but not the message saying IT'S UNSAFE ACTIVEX CONTROL. Especially, I even get this message in my developer machine which already have this ActiveX control.
I tried to embed other OCX I found in my machine. When I run my program, I don't see this message. I only get this message when I embed my own design OCX in the page.
Since this is my first time designning ActiveX control, I am wondering if I made any mistake when I designed my own ActiveX control? Thanks.
Btw, this ActiveX control I design is a simple control, it doesn't access any system resource.

Chia
0
chiachen
11/13/2003 12:45:34 AM
Hi Chia,

Ah. I misunderstood. And forgot a bit too much about COM controls in VB6. The problem is that you have to mark it safe for scripting. You can do this automatically with the Package and Deployment Wizard. When the wizard asks you to specify safety settings, select Safe for initialization and Safe for scripting.
Don
Don Kiely, MCP, MCSD
In the Last Frontier, Interior Alaska
Please post questions and replies to the forum! And remember to MARK AS ANSWER when someone definitively answers a question or resolves a problem!
0
donkiely
11/16/2003 4:43:09 AM

I have an active-x wich will do something and after that will redirect to another page. How do the active-x redirect to another web page???
0
lplaza
11/17/2003 2:00:42 PM
LPLAZA,

Now you're getting way out of my area. You might want to ask this question on the Client Side Web Development forum (view forum 130). There will be more people hanging out there who will know.
Don
Don Kiely, MCP, MCSD
In the Last Frontier, Interior Alaska
Please post questions and replies to the forum! And remember to MARK AS ANSWER when someone definitively answers a question or resolves a problem!
0
donkiely
11/17/2003 6:47:41 PM
Don,

I was away from this ActiveX control project for a while. Finally, I continued this project recently. I took your advice. It didn't work at the beginning, but, you did point me the right solution and direction. Finally, I solved the problem. The answer is simple. The VB6 I installed has bug. Even though I marked my ActiveX control as safe for scripting (by using Package and Deployment Wizard), it's still marked as unsafe. I installed Service Pack 5 and the problem solved.
I just want to take this opportunity to thank you and everyone here. With everybody's help, I can have this problem solved. This is my first time to post question in ASP.NET Forums and I really consider this is a good place to discuss question and share knowledge.

Chia
0
chiachen
1/23/2004 10:39:29 PM

Has anyone had similar problems with the ActiveX control warning when scripting Office components from the browser? I've played with just about every ActiveX setting in every security zone in IE, and I STILL get that message -- even when I just run it from a local html file!
Thoughts?

Peter Brunone
MS MVP, ASP.NET
Founder, EasyListBox.com
Do the impossible, and go home early.
0
PeterBrunone
11/9/2004 6:35:40 PM
Reply:

Similar Artilces:

Help! I cannot access the DataGrid's ItemTemplate's LinkButton's Text Atrribute 's Value!!!!!!!!!!!
I write a datagrid's ItemDataBound method as follows:   private void dgTable_ItemDataBound(object sender, System.Web.UI.WebControls.DataGridItemEventArgs e)  {   if(e.Item.ItemType == ListItemType.Item || e.Item.ItemType == ListItemType.AlternatingItem)   {    if(!isRole("Manager"))    {     LinkButton tmp = (LinkButton)e.Item.FindControl("lbPassed");     if(tmp.Text == "Passed")     {      ((LinkBu...

changes made from one user's webpart's page, effects all user's
 I am just doing this offline right now in Visual Web Developer Express 2008I created the login inonce in the memberpage area, people can modify their webpart page. I created several users to test this out.  I loaded it in a browser.When I make changes as logged in user "A" .  Then logout and login as user "B", user "B,s" webpart page has been changed to user "A".This goes true for whomever I log in as.  It changes for everyone.Is there something specific I need to do in order to get everyone's changes to be unique for them...

Unable to access user control's user control's function\property from another user control
Hi, I used to call an user control's user control function as stated below from my user control in ASP.Net 1.1 wucCompany.wucEmployee.GetEmployeeSomething() After migrating to ASP.Net 2.0, I am unable to use any properties/functions(even the public ones) of the user control's User control's from another user control.  The way I have to do is create property\function in wucCompany which calls the wucEmployee's property\function and call the wucDepartment.GetEmployeeSomething().Since I need to do this change in too many places, I can...

Sybase Ver wise SysTab's, Proc's and add-on info's !!!
Hi DBA Team, Any one is having table formatted information or an excel sheet which will have a clear picture about Sybase Version wide details on System Tables, Procedures and add-on=92s features right from Sybase 4.x to up to date. This will be serving more clarification on Sybase DBA=92s World to know about Sybase version wide comparative changes, features and upcoming details. Experienced DBA=92s are already known this information on their minds. Kindly spare your time to share the same across the WORLD. Thanks In Advance Regards, Viswanathan.V Sybase DBA Practice ...

Replace 1's and 0's in a gridview column with Yes's and No's
Is it possible to change the display of a column in a gridview to show a Yes for all 1's and a No for 0's that display in a particular column of a gridview bound to a database?  If so, can someone share the way with me?  I am using ASP.NET 2.0 with VB Code Behind.  Thanks One way you can do is thrrough  CASE in your select statement: Select YesNoColumn= CASE yourColumn WHEN 1 THEN 'Yes' WHEN 0 THEN 'No' ELSE '' END FROM YourtableLimno <Columns>     <asp:TemplateField HeaderText="yourHeader" SortExpression="yourDataField"> ...

It's Linux !? No, it's BSD ! No, no, it's...
kFreeBSD http://wiki.debian.org/Debian_GNU/kFreeBSD a Debian distro using the FreeBSD kernel ! ObiWan wrote: > kFreeBSD > > http://wiki.debian.org/Debian_GNU/kFreeBSD > > a Debian distro using the FreeBSD kernel ! Why use a BSD kernel? I hope the reason is more than, just because they can. http://wiki.debian.org/Debian_GNU/kFreeBSD_why It's easy to understand why the would want to use Debian packages. :) -- Jimmy Johnson Registered Linux User #380263 >> kFreeBSD >> >> http://wiki.debian.org/Debian_GNU/kFreeBSD >> ...

Hyperlink's, ImageURL's, and OnError's
I created an ASP:Hyperlink and set the ImageURL attribute so the link will be the image.If the image is missing, I would like it to display a 'missing image' pic that I have.  I know you can use the OnError attribute of the <img> tag to run some javascript to change it.Unfortunately I can't find a way to access the Hyperlink's Image that is inside it, so I can add an Attribute so the resulting <img> tag will have an OnError attribute inside of it.Any help?If my Hyperlink is called 'foo'....would I do...  ((Image) foo.Controls[0]).Attributes.Add(&...

Publishing the site's as shortcuts in the users' desktop's
Dear All,I have a web application. In that some client will be configured.In that the authorized person can publish a web page.When the page is published, the shortcut for that URL has to be set in the clients desktop.Can we achieve this functionality?Kindly help to get rid of this.Thanks a lot in advance.  Hi jayachitra  I have read the thread carefully; however, I am not sure I have understood the facing needs correctly. Based on my understanding, you would like to create a shortcut to user’s desktop, right?  If so, it is not recommended due to the security issue, the ...

Net security is everyone's problem not just Microsoft's, says Ballmer
Speaking at the Center for Strategic and International Studies in Washington DC, Microsoft chief executive Steve Ballmer declared that responsibility for cybersecurity falls on everyone---users, software vendors, and government agencies. Mr. Ballmer did not outline any new security initiatives, but continued to promote the upcoming Windows XP Service Pack 2, an update to the company's server operating system, and future versions of Internet Explorer that will block pop-up ads and unauthorized downloads. Mr. Ballmer outlined active protection technology, designed to stop worms...

Who's show is SN? Steve's or Leo's?
I don't want to start anything (honestly)! Just want to ask a simple question. Does the Security Now podcast belong to Steve Gibson or Leo Laporte? Maybe I'm in a world all to myself, but when I listen to the excellent SN podcasts, I want to hear STEVE, not Leo. But especially in the past few shows, it seems Leo will repeatedly interrupt Steve in the middle of a sentence that I want to hear the rest of. I consider this very rude of Leo. Steve is making a point that I (we) want to hear, then looses his train of thought after Leo barges in and asks something. It...

DataSet's DataTable's and TableAdapter's Oh My!
Here is my situation.  I am using VB as my programming language.I am creating a part of a website that will be the admin section.  I want the admin to be able to add/edit data in a set of tables that normal users can't.  There are 20 lookup tables that I use in the website that I want the admin to be able to manage (i.e. add, edit, delete, insert).  I don't want to create 20 separate web pages (one for each table).  I have one page that has links to all the tables.  Each link has a "table" querystring variable associated with it.  When the...

Guru's..?? Any do's and/or dont's for Zfd4 and Citrix..?
We've got a nw6/sp5 network with GW 6.5, bm3.7 and zfd 4.01 up'n'running.. Now we're adding a citrix server ( win2003) to the mix, will supply a couple off app's to users over the internal VPN in another city. Probably we'll skip the AD phase since we can not see any app and/or user with the need for AD. So,, any special considorations..? tip's'tricks..? known issues...? t.i.a... On Mon, 16 Aug 2004 15:57:10 GMT, Emerson wrote: > So,, any special considorations..? tip's'tricks..? known issues...? biggest one... zfd4.x d...

411 it's pconsole, 51 it's NWPMW32, 65 it's ???
I like to give some of my users controll over their print jobs. In Netware 3.x to 4.x it was pconsole. In Netware 5.x it was NWPMW32. I don't seem to be able to find the same type of utility for Netware 6.5? We don't like to give user access to nwadmin and the NWPMW32 I copied from my 51 server (TID 10075273) to the 65 server won't display the jobs. Mmccabe, It appears that in the past few days you have not received a response to your posting. That concerns us, and has triggered this automated reply. Has your problem been resolved? If not, you might try o...

login failed because user's IsApproved is false for user's account
Hi How can i detect if a user's login fails because their account is not approved yet (i.e IsApproved = false in Membership table) I am using a templated login control and if the user's login fails for this reason all that happens is that the FailureText control is displayed. How can i change the failure text if the user's account is not approved? thanks andrea Use Membership.GetUser Function this function Return a hydrated MembershipUser Object you can access its properties and check the validity see the link below http://msdn2.microsoft.com/en-us/library/40w5063z.aspxRega...

Web resources about - access user's local machine's info - asp.net.security

Resources last updated: 1/3/2016 1:50:03 PM