Re: Difference between ASPNET account and IIS Anon Access account

From: Justin Narracott (justin@traindotnet.com)
Date: 03/02/03 

From: "Justin Narracott" <justin@traindotnet.com>
Date: Sun, 2 Mar 2003 23:22:00 +0100

"ShikariShambu" <shikarishambu70@hotmail.com> wrote in message
news:unb0iQP4CHA.1900@TK2MSFTNGP10.phx.gbl...
> Hi,
> I would like to understand the roles of machinename\ASPNET account
and the
> IIS Anon Access Account.
>
> Does a ASP.NET website run under machinename\ASPNET account or does it
use
> the IIS Anon Access account (if the IIS is configured for anonymous
access)?
>
> TIA
>

If using IIS Anonymous Authentication, the MACHINE\IUSR_MACHINE account
will be used unless you set the <identity impersonate = "true"/> in your
WEB.CONFIG file. This is the case for Windows or Forms Authentication.

I would reccomend you test this by using the
WindowsIdentity.GetCurrent() method

If however you set the <identity impersonate = "false"/> Then the
MACHINE\ASPNET account will be used.

I would strongly recommend you test this by using the
WindowsIdentity.GetCurrent() method

Bare in mind that the IPrincipal object will return the name provided by
the logged in user if you use forms authentication, again don't take my
word for it, try it out testing the HttpContext.Current.User. With
Windows Authentication this will be NULL in Anonymous Authentication.

HTH
Justin
>

Relevant Pages