ASP.NET & Integrated Security setup?

From: Dave (DavidTabaka_at_hotmail.com)
Date: 08/08/03 

Date: Fri, 8 Aug 2003 10:29:05 -0700

Hi,

I've read quite a few places where it recommends you use
integrated security in your connection string.

I tried this in test page to connect to the Northwind
database by setting my connection string to:

"data source=<mymachinename>;initial
catalog=Northwind;integrated security=SSPI;"

It worked as long as I added ASPNET, the account used for
running ASP.NET Worker processes, as a SQL Server Login
with access to Northwind.

My question is should each web application on the server
have it's own ASPNET-type account so it only has accesses
the databases it needs?

For example:
ASPNET_Northwind (This account can only access the
Northwind site and the Northwind database)

ASPNET_Pubs ((This account can only access the Pubs site
and the Pubs database)

etc. If so, how do I do this?

Thanks, Dave.

Relevant Pages

  • Re: Help with connection string
    ... The connection string looks correct. ... Is that E drive accessible to the user account under whose context the ... IIS process is running (if your website has Anonymous enabled, ... connect to an unpassworded Access 2007 database for use in a small ...
    (microsoft.public.inetserver.asp.db)
  • Cant log in using .NET Provider (invalid username/password)
    ... a database with a table. ... with an account i created with no password. ... I've double checked the username & password and they are correct. ...
    (comp.databases.ingres)
  • Re: Getting User Info
    ... database, but now the user is my Windows account. ... connection string as Uid, as well as User ID and it still comes back the same. ... >> elevated access in order to do the migration, and that is alot of sprocs. ...
    (microsoft.public.dotnet.framework.adonet)
  • Re: SQL - Login falied, user null error w SSPI
    ... > 2) Integrated Windows Authentication ... account that you use for anonymous access in your web site. ... WITHIN THAT DATABASE, you can limit access to Select, ... >> Maybe you should add some more details about connection string, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: SQL - Login falied, user null error w SSPI
    ... > 2) Integrated Windows Authentication ... account that you use for anonymous access in your web site. ... WITHIN THAT DATABASE, you can limit access to Select, ... >> Maybe you should add some more details about connection string, ...
    (microsoft.public.dotnet.security)