Re: ASP.Net Security and SQL Server access

From: Chris Jackson (chrisj_at_mvps.org)
Date: 07/17/03 

Date: Thu, 17 Jul 2003 14:16:53 -0400

Your IIS application runs under one identity. This is configured in the IIS
settings.

ASP.NET runs under another identity, which you can configure in the
machine.config. (By default, it's MACHINE\ASPNET.)

If you want ASP.NET to use the Windows identity of the IIS application
(which can be the authenticated user) then make sure your web.config has
<identity impersonate="true"> 

-- 
Chris Jackson
Software Engineer
Microsoft MVP - Windows XP
Windows XP Associate Expert
-- 
"Richard" <ricwatts@cisco.com> wrote in message
news:eoey3e4SDHA.632@TK2MSFTNGP12.phx.gbl...
> Can someone tell me the best security configuration for an intranet site.
>
> I want to use Window accounts (groups) to control access to the Web site
and
> the access to a SQL Server database on a different server.
>
> Does the web.config file override the IIS MMC security settings ?
>
> Cheers
>
>
>
>

Relevant Pages

  • Re: been hit by hacker, servudaemon installed
    ... security patching on iis 4.0 ... security fixes into the new version. ... >install all service packs and patches from Microsoft, ... >>>Windows, Apache, you name it. ...
    (microsoft.public.inetserver.iis.security)
  • Re: been hit by hacker, servudaemon installed
    ... security patching on iis 4.0 ... security fixes into the new version. ... :>install all service packs and patches from Microsoft, ... :>>>Windows, Apache, you name it. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Mac Server Hacked In Less Than 6 Hours
    ... Windows has RAS, and for it is built in since NT 3.1 ... | A typical IIS box and this Mac are not the same thing so the comparison ... IIS has been subject to quite a few bugs and so have ... Security isn't a proprietary attribute. ...
    (sci.crypt)
  • Re: File sharing, major security issue
    ... > windows file sharing for hours with no luck. ... > seem to be set by IIS though, ... don't have a firewall, you need one. ... your logs to know which ISP to complain to. ...
    (microsoft.public.inetserver.iis.security)
  • Re: SSL Port 443 disappears after server restart
    ... Often this occurs in Windows 2000 because your settings first get stored to ... The workaround for me usually is to manually stop and restart the IIS www ... > exchange server several times a week so the disappearing act of SSL Port ...
    (microsoft.public.inetserver.iis.security)