RE: Who is may ASP.NET app supposed to run as?



Sorry - and what about Vista - what user is default there?

--
thanks - dave
david_at_windward_dot_net
http://www.windwardreports.com

Cubicle Wars - http://www.windwardreports.com/film.htm




"David Thielen" wrote:

Ok, found the impersonation and set it to false (no idea how that was ever
true).

I am on Windows 2003, not W2K so NETWORK SERVICE is correct then - yes? And
for WinXP?

For W2K the user is ASPNET - is that user used for anything in Windows 2003
or is it just around because some apps assume it exists from W2K?

We need to set permissions for our logging directory for the ASP.NET app so
is it ok if we grant permissions to NETWORK SERVICE for Windows 2003 & XP,
and to ASPNET for W2K? SHould that cover any standard configuration?

--
thanks - dave
david_at_windward_dot_net
http://www.windwardreports.com

Cubicle Wars - http://www.windwardreports.com/film.htm




"Dominick Baier" wrote:

you have client impersonation enabled - this will give you the behavior you
see.

W2K has no NETWORK SERVICE account - this was introduced in XP.

On W2k ASP.NET apps run by default as ASPNET.


-----
Dominick Baier (http://www.leastprivilege.com)

Weirder and weirder - now it shows it running as me. Maybe we have
something wrong in our installer but it looks like we just create the
web application and never set who it runs as.

we are calling aspnet_regiis -ga "NETWORK SERVICE" and aspnet_regiis
-pef connection_string our_app_root_directory.

Any ideas?

Cubicle Wars - http://www.windwardreports.com/film.htm

"David Thielen" wrote:

Hi;

My ASP.NET app (on Windows 2003) is running under IUSR_SERVERNAME. Is
this the correct user for strictest security? I thought best was
"NETWORK SERVICE" or something like that.

And do I need to set this when installing the app? I don't think I am
specifying the user to run under anywhere.

--
thanks - dave
david_at_windward_dot_net
http://www.windwardreports.com
Cubicle Wars - http://www.windwardreports.com/film.htm




.



Relevant Pages

  • RE: Who is may ASP.NET app supposed to run as?
    ... W2K has no NETWORK SERVICE account - this was introduced in XP. ... Cubicle Wars - http://www.windwardreports.com/film.htm ... My ASP.NET app is running under IUSR_SERVERNAME. ... this the correct user for strictest security? ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: Who is may ASP.NET app supposed to run as?
    ... Cubicle Wars - http://www.windwardreports.com/film.htm ... wrong in our installer but it looks like we just create the web application ... My ASP.NET app is running under IUSR_SERVERNAME. ... the correct user for strictest security? ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: Who is may ASP.NET app supposed to run as?
    ... Cubicle Wars - http://www.windwardreports.com/film.htm ... W2K has no NETWORK SERVICE account - this was introduced in XP. ... My ASP.NET app is running under IUSR_SERVERNAME. ... this the correct user for strictest security? ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: running "aspnet_regiis -i" during install
    ... Cubicle Wars - http://www.windwardreports.com/film.htm ... created directory in the installer. ... update all web sites' script mapping. ... To prevent the installation from automatically updating the script maps of ...
    (microsoft.public.dotnet.framework.aspnet)