title: Impersonating users through NTLM
body: <p>I have an internal application which has two levels of security. FormsAuthentication for client-facing application and NTLM Integrated authentication for management interface.</p>
  
  <p>I can easily impersonate clients by just creating the proper .ASPXAUTH cookie with the FormsAuthentication class' methods. However generating HTTP Authentication header for NTLM is beyond me so far.</p>
  
  <p>I had my hopes up when I found this article (<a href="http://msdn.microsoft.com/en-us/library/ms998358.aspx#paght000025_usingimpersonation" rel="noreferrer">http://msdn.microsoft.com/en-us/library/ms998358.aspx#paght000025_usingimpersonation</a>) but then I realized that it only creates a context to run code in for a duration of the request. And I would like to switch my entire session to make the server think I'm using another domain login. I have administrative privileges on my account, so it's not for the purpose of screwing around or stealing domain passwords.</p>
  
  <p>Is it even possible? Thanks.</p>