RE: IIS suExec?

From: Damon Sisola (dsisola@osius.com)
Date: 11/30/01 

From: "Damon Sisola" <dsisola@osius.com>
To: <jyates@dataservice.org>, <focus-ms@securityfocus.com>
Subject: RE: IIS suExec?
Date: Thu, 29 Nov 2001 15:24:03 -0800
Message-ID: <000b01c1792c$ef3849d0$8947b892@osius.com>

IIS has the ability to run any site/directory/app in or out of process. If
in process (low application protection,) it runs under the SYSTEM account by
default, and if out of process (pooled or isolated application protection)
the app will run under the IWAM_computer account, which is a shared account
for all out of process apps within IIS. If you take it one step further and
use COM components, you can specify which user account each COM package runs
as.

-----Original Message-----
From: jyates [mailto:jyates@dataservice.org]
Sent: Thursday, November 29, 2001 9:53 AM
To: focus-ms@securityfocus.com
Subject: IIS suExec?

Apache has a module called suExec. Which allows CGI files to be run as
different users. Does IIS have a similar feature?

We are running IIS 4.0, but are willing to goto IIS 5.0 if need be. 

--
Jason Yates
Network Administrator, RHCE

Email:	jyates@dataservice.org
Phone: 	(302)-477-8952
Cell :      (302)-743-7291

Relevant Pages

  • RE: IIS suExec?
    ... LogonUser and ImpersonateLoggedOnUser function here: ... Henry ... > Subject: IIS suExec? ...
    (Focus-Microsoft)
  • IIS suExec?
    ... Subject: IIS suExec? ... Which allows CGI files to be run as ... Does IIS have a similar feature? ...
    (Focus-Microsoft)
  • RE: SOME Users cannot access OWA others do, error HTTP 500
    ... I understand that some account access OWA ... IIS 6.0 compression corruption causes access violations ... compressed copy of the affected files on the SBS server: ...
    (microsoft.public.windows.server.sbs)
  • Re: Basic Authentication fails with Error 401.2 where Integrated s
    ... On the IIS directory security tab, anonymous access is disabled, digest ... authentication is disabled, integrated authentication is disabled and basic ... account created has full permissions for the folder and the file that's in it. ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS 6 ASP: Which Process Identity Is It Using? App Pool or Anon?
    ... But isn't the COM object running under the ... The COM object can be running under the impersonated account, ... example, even if IIS launched the COM object with the impersonated user, the ... It will now be using "TestService" identity. ...
    (microsoft.public.inetserver.iis)