Re: ASPNET account and NT Authentication with SQL Server -Account Locked Out

From: Joe Kaplan \(MVP - ADSI\) (joseph.e.kaplan_at_removethis.accenture.com)
Date: 09/09/05 

Date: Thu, 8 Sep 2005 20:19:07 -0500

Can you set up a domain account to run ASP.NET under and use that to access
SQL? The matching machine accounts thing always struck me as kind of
hackish.

Joe K.

<ryan.d.rembaum@kp.org> wrote in message
news:1126220834.011784.63470@o13g2000cwo.googlegroups.com...
>I have an application running on an IIS box that is trying to make a
> connection to a separate SQL server box. The application is using
> Windows NT authentication. During development I can access my data
> just fine. When I view it in the browser I get the message that the
> database does not exist or I do not have the necessary permission to
> logon. I have narrowed the problem to one of security rights. It
> seems that windows is passing the ASPNET account to the SQL server box.
> So what I did was change the password of the ASPNET account. I then
> created an ASPNET account on the other box and gave it the same
> password. (I tried this with the IUSR_[MachineName] account first, but
> the following is what leads me to believe it is the ASPNET account that
> is causing the trouble:
>
> When I go to access the web page, the SQL Server account gets locked
> out. I am not sure why! Is it autogenerating a new password to
> overight my change?
>
> I know I could impersonate someone, but I would rather not setup some
> sort of dummy account like that; there is a lot of bureaucracy to go
> through to do so. I also do not want to deal with SQL authentication
> and store the password in the connection string. It seems that in a
> Windows intranet environment this just should not be that hard! I must
> be missing something.
>
> Anyhelp would be greatly appreciated. (If it helps, I created the
> connection string I am using via the ASP.Net wizard. It contains the
> directive to use integrated security.)
>
> Thanks!!!
> Ryan
>

Relevant Pages

  • Re: Connect problem MSDE ADO ASP
    ... problems on setting the IIS User password. ... result - and both can access the MSDE SQL via the webinterface (I am aware I ... > your connection string, and put in a valid SQL USER ACCOUNT, not a Windows ...
    (microsoft.public.sqlserver.programming)
  • RE: Integrated Authentication (Kerberos) Problem
    ... Verify the SPN for the SQL service account is registered such as the ... >Thread-Topic: Integrated Authentication Problem ... A Windows XP SP1 with IE6 client machine ...
    (microsoft.public.inetserver.iis.security)
  • Re: User authentication
    ... I was able to change the owner of a backup to the backup operator (Windows ... account) on a backup job configured on SQL Agent, ... If I set a backup job on SQL Server Maintenance Plan on SQL Server 2005, ... I am not able to assign the job to a different Windows account. ...
    (microsoft.public.sqlserver.clients)
  • Re: User authentication
    ... I was able to change the owner of a backup to the backup operator (Windows ... account) on a backup job configured on SQL Agent, ... If I set a backup job on SQL Server Maintenance Plan on SQL Server 2005, ... I am not able to assign the job to a different Windows account. ...
    (microsoft.public.sqlserver.clients)
  • Re: Fix for: Server Application Unavailable Error after Applying Security Update for IE
    ... >> Internet Explorer security patch and ASP.NET V1.0 running on Windows XP. ... >> you can execute the following batch file as a workaround for the issue. ... >> Stops the IIS and ASP.NET state services>> Deletes and recreates the ASPNET account with a known temporary password ...
    (microsoft.public.dotnet.framework.aspnet.security)