RE: Who is may ASP.NET app supposed to run as?



you have client impersonation enabled - this will give you the behavior you see.

W2K has no NETWORK SERVICE account - this was introduced in XP.

On W2k ASP.NET apps run by default as ASPNET.


-----
Dominick Baier (http://www.leastprivilege.com)

Weirder and weirder - now it shows it running as me. Maybe we have
something wrong in our installer but it looks like we just create the
web application and never set who it runs as.

we are calling aspnet_regiis -ga "NETWORK SERVICE" and aspnet_regiis
-pef connection_string our_app_root_directory.

Any ideas?

Cubicle Wars - http://www.windwardreports.com/film.htm

"David Thielen" wrote:

Hi;

My ASP.NET app (on Windows 2003) is running under IUSR_SERVERNAME. Is
this the correct user for strictest security? I thought best was
"NETWORK SERVICE" or something like that.

And do I need to set this when installing the app? I don't think I am
specifying the user to run under anywhere.

--
thanks - dave
david_at_windward_dot_net
http://www.windwardreports.com
Cubicle Wars - http://www.windwardreports.com/film.htm



.



Relevant Pages

  • RE: Who is may ASP.NET app supposed to run as?
    ... Cubicle Wars - http://www.windwardreports.com/film.htm ... W2K has no NETWORK SERVICE account - this was introduced in XP. ... something wrong in our installer but it looks like we just create the ... My ASP.NET app is running under IUSR_SERVERNAME. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: Who is may ASP.NET app supposed to run as?
    ... Cubicle Wars - http://www.windwardreports.com/film.htm ... W2K has no NETWORK SERVICE account - this was introduced in XP. ... My ASP.NET app is running under IUSR_SERVERNAME. ... this the correct user for strictest security? ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: Who is may ASP.NET app supposed to run as?
    ... Cubicle Wars - http://www.windwardreports.com/film.htm ... wrong in our installer but it looks like we just create the web application ... My ASP.NET app is running under IUSR_SERVERNAME. ... the correct user for strictest security? ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: IIS6 Network Service Identity - when needed?
    ... This is because an application's permissions is something that a developer ... corresponding app pools) based on the characteristics of the .Net code. ... can/can't run with the Network Service identity. ... administrative-level privileges. ...
    (microsoft.public.inetserver.iis.security)
  • Re: "The underlying connection was closed: Could not establish trust relationship for the SSL/TLS se
    ... You're making a remote method call to a network service. ... your app has a dependency upon something it has no control ... app has no control. ...
    (microsoft.public.dotnet.framework)