I've updated the subject since the design issue is not Vista-UAC- specific.
A single system-wide ccache isn't going to solve the problem if it is indexed by logon session id (LSID). The real problem is the use of LSID, which is different between the user's logon session and an elevated process spawned by the session. What identifier can be used that will be the same for the logon session and an elevated process it spawns? Should this discussion continue on krbdev? _______________________________________________ kfwdev mailing list kfwdev@mit.edu http://mailman.mit.edu/mailman/listinfo/kfwdev