protected void Page_Load(object sender, EventArgs e)
{//下面的方法调用时最好做成异步线程，以免在文件过大时让用户主线程等待过久//如果asp.net模拟域账号访问客户端共享文件夹，报对路径"\\xxx\folder"的访问被拒绝//需在web.config文件system.web节配置<identity impersonate="true" userName="域\域账号" password="密码" />IntPtr ptr = default(IntPtr);if (WinLogonHelper.LogonUser("域账号", "域", "密码", 9, 0, ref ptr) != 0){using (WindowsIdentity wi = new WindowsIdentity(ptr)){using (WindowsImpersonationContext wic = wi.Impersonate()){if (!Directory.Exists(@"\\\\path\\folder")){//客户端文件夹对当前域账号开放共享，此处域账号可以根据所开放的权限对文件夹进行访问，例如读取文件夹中的文件、将文件copy到其他地方//......(共享文件夹的方式可以传输2G以上的多个文件)//将文件从客户端复制到服务端后，可以对新生成的文件目录设置共享访问权限，例如设置只读权限SetFolderACL("文件保存物理路径或网络地址", "域\\（一个反斜杠）域账号", FileSystemRights.Read, AccessControlType.Allow);}}}}
}public static class WinLogonHelper
{[DllImport("advapi32.DLL", SetLastError = true)]public static extern int LogonUser(string lpszUsername, string lpszDomain, string lpszPassword, int dwLogonType, int dwLogonProvider, ref IntPtr phToken);
}public static bool SetFolderACL(String folderPath, String userName, FileSystemRights rights, AccessControlType allowOrDeny)
{bool modified;DirectoryInfo folder = new DirectoryInfo(folderPath);DirectorySecurity fs1 = folder.GetAccessControl(AccessControlSections.All);InheritanceFlags inherits = InheritanceFlags.ContainerInherit | InheritanceFlags.ObjectInherit;FileSystemAccessRule accRule = new FileSystemAccessRule(userName, rights, inherits, PropagationFlags.None, allowOrDeny);fs1.ModifyAccessRule(AccessControlModification.Add, accRule, out modified);folder.SetAccessControl(fs1);DirectorySecurity fs2 = Directory.GetAccessControl(folderPath);fs2.SetAccessRuleProtection(false, true);Directory.SetAccessControl(folderPath, fs2);return modified;
}