Re: AD Login failure when using ActiveDirectoryMembershipProvider

I agree with Dominick. Use the app pool identity and create separate app
pools for each app if you need different credentials.

Also, in many cases you don't need to use a fixed domain account for the app
pool since the app pool runs as network service by default. Network service
IS a domain account when accessing resources on the network (the machine's
domain account), so this is often all you need.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"Craig Wagner" <MSDNNospam207@xxxxxxxxxxxxx> wrote in message
news:0EFE846A-CDC4-475A-BC84-C217B8A02DD3@xxxxxxxxxxxxxxxx
Let me correct my previous statement.

That IS how we configure machines at the client site, and have been
configuring them for over a year.

Perhaps it is not how we SHOULD be configuring them, but that's a
different
issue.

"Dominick Baier" wrote:

No - thats not how you would configure an IIS6 -

you would configure the app pool to run as a domain account and use no
impersonation.



.

Relevant Pages

  • RE: Flowing Kerberos Credentials from Browser Client to Web App to Web Service App ...
    ... The web service application is using an App Pool identity, ... that is also a domain account. ... service applications. ... Create an app pool and assign the domain account to the identity fields in place of the Network Service account. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Kerberos Authentication Errors
    ... We're having an issue with Kerberos authentication for an ASP.NET app. ... up to run under a domain account instead of NETWORK SERVICE. ... Now we want to remove the domain user from the app pool and go back to ... server host/ourserver.ourdomain. ...
    (microsoft.public.inetserver.iis)
  • Re: protal creation error
    ... On db it has security admin and DB creator rights ... I check app pool, 2 of them central and sharepoint one. ... both using my domain account ...
    (microsoft.public.sharepoint.portalserver)
  • Re: AD Login failure when using ActiveDirectoryMembershipProvider
    ... If you want to use a fixed domain account, ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... pool since the app pool runs as network service by default. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Security issues with Win2003 and ASPNet app
    ... Did you try logging in to the server with that domain account to be sure ... > The event log says that the identity of my app pool is invalid. ... >>Hello RichardF, ...
    (microsoft.public.dotnet.framework.aspnet.security)