impersonate

From: xiaohang zhu (zhuxiaohang_at_hotmail.com)
Date: 07/23/03


Date: 23 Jul 2003 09:11:39 -0700


Hi all,
  I create a aspnet web app for my company. I set it up on a win2000
server with IIS5 as a intranet app. For security, I want to restrict
the write permission only to a specified group. To do this, I tried to
set up this way. First, I set iis to use Integrated authentication,
anonymous access is disabled. Second, I modified machine.config. I
modified the <identity impersonate="true" />. I check that
<authentication mode="Windows" />. By set these two setting, I think
that's enough. To make things simple, I don't have any web.config
files. But things get really strange. I'm denied to access my pages,
it says I don't have permission to access. But I have added all domain
users to have access to these pages. The other strange thing is if I
add the aspnet account to the folder ACL, then everybody can access
pages. It seems that all the access is controled by the aspnet
account. But I do set the impersonate="true", why it still acting like
false.
  Hope you understand what I'm talking about and give me some ideas.

Thanks

Jerry



Relevant Pages

  • Re: Web Service Security problem
    ... the server. ... the failed logon attempt was ASPNET. ... >Allowin that account access to lan resources would be a large security risk. ... >> Another possible issue is the ASPNET account on the server. ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • Re: Windows Identity and IIS6.0
    ... Please undo your permission changes to ISA_User and ASPNET account -- they ... On IIS6, ASP.Net is configured to not impersonate, and the Application Pool ... My operating system is Win 2003, Framework is 1.1 and Web Server is IIS 6.0 ... I have give Full permission to the ISA_User account and ASPNET Account. ...
    (microsoft.public.inetserver.iis)
  • Re: .NET Framework 1.1 SP1 and ASP.NET
    ... I am getting the same error after installing SP1. ... Somebody suggested that I need to simply reset my ASPNET user's ... > password for the ASPNET account in machine.config. ... > other accounts in the User Accounts part of the Control Panel. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Cant Upload files, ASPNet Account required
    ... installed but there is no ASPNET account. ... > Server 2003 which has the framework installed. ... > Domain Controller, there are no Local Accounts such as ASPNET. ...
    (microsoft.public.dotnet.framework.aspnet)
  • IWAM_machinename account registry hive remains loaded evan after IISReset
    ... On a Win2000 domain controller, the ASPNET worker process ... ASPNET account. ... Logon as a batch job. ...
    (microsoft.public.inetserver.iis)