使用C＃Web API在NTFS服务器上创建文件夹

Question

I am implementing an application that will create a folder on the NTFS File Server. For that, I have set up the distributed environment. Meaning, I have machine on which I have hosted my C# Web API and I have NTFS file server on which I have to create folders.

I want my API to create a folder on NTFS machine. How can I do that? Do I need to share NTFS Drive/Folder to create a subfolder? If so, then with whom I need to share a NTFS folder ( either server user or IIS_USRS )?

Is there any other way to create a folder without sharing a drive/folder on NTFS folder.

Answer 1

When I have done this in the past I have done it through a temporary impersonation. For example...

using (Impersonator impersonate = new Impersonator(@"UserName", "Password", "Domain")) 
{
     //Create directory or copy files across the network
}

I believe I lifted my impersonator code from A small C# Class for impersonating a User

Answer 2

Case 1:

if web server and file server are in the same domain, you can consider to use a domain user, and created a shared folder on NTFS server and grant full access for the domain user accessing it. (depends on your requirements).

On web server, for the web application pool, set the domain user as the identity/credential to run the pool. so you can easily use IIS management tool to update it if password gets changed. for the authentication, you can use whatever you want based on requirements, but remember while you call the code to create folders on NTFS server, you need to use app pool user. (for example, if you turn on impersonation on a different user in authentication, in your code, you need to do impersonation using the pool user.)

Case 2, web server and file server are not in the same domain, I usually will set up a ftp server on the file server to allow specific users to access it (creating folders and upload files....). Otherwise when you may need your IT administrator to make File server domain trust web server domain, then you can do the same thing as case 1.

About impersonation code, it could be something like:

    //get the identity of an appPool 
         using(System.Security.Principal.WindowsIdentity wid = System.Security.Principal.WindowsIdentity.GetCurrent())
         {
             using (System.Security.Principal.WindowsImpersonationContext ImpersonationCtx = wid.Impersonate())
             {
                 //creating folders, uploading files to UNC path... 

                 ImpersonationCtx.Undo();
             }
         }

If your case is one of this, hope it helps.