Hosting multiple sites/ASP.NET security

From: Rado Stoyanov (radostoyanov@softhome.net)
Date: 09/19/02 

From: "Rado Stoyanov" <radostoyanov@softhome.net>
To: focus-ms@securityfocus.com
Date: Thu, 19 Sep 2002 15:56:07 +0300

Hello,

I host several web sites that I own on a single web server (Windows
2000). It's possible to choose a separate Anonymous web user account for
each of the sites in IIS 5, and ASP applications run in the context of
own anonymous users. This is wise, because each of the anon users is
permitted to access only corresponding web site's directories, and not
other web site's directories.

Unfortunately, when I am migrating to ASP.NET, I have faced the problem
that there's a single account called ASPNET and all web applications run
under this account, no matter of which is the current IIS web's
anonymous user.

My question is: is there any method to achieve the same with ASP.NET, or
are there any alternative considerations that can be taken, in order to
have a secure multi-hosting environment.

Thanks,
Rado

Relevant Pages

  • Re: E-mail threatening to DEACTIVATE my MSN service
    ... I get a few of these every day, from banks, eBay and PayPal. ... don't even HAVE an account with the Washington Mutual Credit Union. ... Many companies have set up identify fraud pages on their web sites ... and have published email addresses to report fraud. ...
    (microsoft.public.security)
  • Re: unknown added files to Administrator folder
    ... just like files are placed in the Temporary Internet Files folder ... account up untill last night. ... Norton says there are no viruses found, 2 some web sites ... this because the last time I deleted cookies, I was not able to access ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Configuration Differences
    ... I don't see how that would make a difference unless the web sites are ... >> Authentication enabled? ... >> to a Windows account). ... >> When impersonation is enabled, ASP.NET will impersonate the account that ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: pop3 e-mail access
    ... Are you sure these are PoP3 mailboxes and not Http ... really an Http account, then you would have to access the mail via the Web ... and send and receive any e-mails. ... > I have setup pop3 accounts on several web sites and have confirmed them ...
    (microsoft.public.pocketpc)
  • Re: I am unable to access password required sites w/password
    ... Troubleshoot Situations Where You Cannot Complete MSN Sign-up or Connect to SSL Secured Web Sites ... You Cannot Access Your MSN E-mail Account or Authenticate with a Web Site in Various Programs ... Windows 2000 Group Policy Registry Table: ...
    (microsoft.public.windows.inetexplorer.ie6.browser)