Re: Possible to run an ASP.NET page as ANONYMOUS LOGON?

Well the application I'm working on is exposing acls and their usernames,
and I was hoping I could show the Anonymous Logon account instead of IUSR to
be a little friendlier to the users. I suppose I could create a separate
anonymous account with a better name and impersonate that instead of the
default IUSR. Oh well.

"Dominick Baier [DevelopMentor]" <dbaier@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
wrote in message news:4580be6319be918c84e4732ee11c6@xxxxxxxxxxxxxxxxxxxxx
Why do you want to do that?

You could also set a separate anonymous user for the application - or
impersonate noone and set a separate worker process identity in IIS6.

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

This is related to my other post.

I'm trying to impersonate NT AUTHORITY\ANONYMOUS LOGON when a user is
not authenticated, rather than having it impersonate the IUSR account.

I seem to be able to assume the id using ImpersonateAnonymousToken,
but I get access denied to machine.config when I launch, even though
I've explicitly granted access to this file to ANONYMOUS LOGON. Is it
just not realistic for this to work?





.

Relevant Pages

  • Re: DCOM access from a different domain (yes another accessdenied question)
    ... I still can't get anonymous logon to work, even when I enable the guest ... I originally hoped that having an account in the domain with a matching ... The guest account is disabled by default -- no anonymous logon. ... Restrict Anonymous access is enabled. ...
    (microsoft.public.win32.programmer.ole)
  • Re: XPSP 2 upgrade, now OE does not work, Messages:
    ... those errors denote problems on Hotmail's end. ... Has the account ever worked in OE? ... "transparent proxy server" which does not support WebDAV. ... (Anonymous Logon & Prompt for... ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Anonymous change of passwords?
    ... anonymous logon is used to open a session anonymous on your pc (for example ... breach because most of the time we don't change this account password define ... In the security log I found the ... > Audit Account Management ...
    (microsoft.public.security)
  • Re: Disabled IIS Anonymous account
    ... are authenticating with the IUSR_computername account. ... The anonymous logon ... events you are seeing are probably normal system "null" connections that are ... used by the browse service and other system network connections. ...
    (microsoft.public.win2000.security)
  • Removing IUSR_Server User
    ... I created another user for anonymous logon, and applied it to the IIS site. ... I did change the password for IUSR. ... any way to get rid of this user from being associated with the computer/IIS? ...
    (microsoft.public.inetserver.iis)