RE: Web Serivce and Required Privilege

From: Julian Gonzalez [MS] (juliangonzalez@online.microsoft.com)
Date: 09/27/02 

From: juliangonzalez@online.microsoft.com ("Julian Gonzalez [MS]")
Date: Fri, 27 Sep 2002 16:29:50 GMT

This is due to the ASPNet account not having the required privileges to
perform impersonation. The ASPNet user is impersonating this user and
doesn't have the required privilege to perform this impersonation. Giving
the ASPNet user "act as operating system" should do the trick, although
this is not recommended for security reasons. This along with the fact
that you are storing the username and password in clear text on the server
is a bad thing. You should use IIS to perform the impersonation. Go to
the IIS Manager, right click on the Web Site, properties, security tab, use
anonymous but use this user as the default anonymous account instead. Also
remove username and password from the Web.Config.

Julian Gonzalez
Microsoft Corporation

This posting is provided AS IS with no warranties, and confers no rights.
You assume all risk for your use. © 2002 Microsoft Corporation. All rights
reserved.

Quantcast