SQL Integrated Security in .NET

From: basin (basingley_at_yahoo.com)
Date: 06/26/03 

Date: Thu, 26 Jun 2003 07:12:29 -0700

I have a developer trying to run her app on my server
using sql integrated security. I am getting this error on
the home page:
Parser Error Message: Could not create Windows user token
from the credentials specified in the config file. Error
from the operating system 'A required privilege is not
held by the client.

Here is my setup:
In IIS, Anonymous and Windows Auth. is checked. The
identity of the iisusr is changed to a domain account that
is added to the SQL server.
This line is in her web.config:
<identity impersonate="true" userName="domain\username"
password=password"/>
Machine.config ProcessModel is changed to use "System"
ASPNET account has "Act as OS" privileges.
Here is the conn string she has in her global/asax:
Application("Dem_ConnectionString")
= "SERVER=ssqlServer;Database=myDatabase;Trusted_Connection
=True;Integrated Security=SSPI;persist security
info=True;Connect Timeout=120;"

I got ALL of this from KB articles, but it STILL does not
work...am I missing something??
Thanks!!!

Relevant Pages

  • SQL Integrated Security in .NET1.1
    ... I have a developer trying to run her app on my server ... using sql integrated security. ... from the operating system 'A required privilege is not ... identity of the iisusr is changed to a domain account that ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: problem connecting to dbase from webservice with impersonation
    ... will acess a remote SQL Server instance, so you want to let your ASP.NET ... application run under a domain account so as to access the remote SQL ... Microsoft MSDN Online Support Lead ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: IIS 6 CreateObject premissions issue
    ... >> tier system so I am confident that running on Windows 2000 what I am ... >> What I am attempting is to add a Windows 2003 server box to function as ... However if it is set for anonymous access using the ... >> end boxes to specifically allow the Domain account I attempted to use as ...
    (microsoft.public.inetserver.iis.security)
  • Re: Networking XP Pro to a Downlevel NT4 domain
    ... There are two ways to create a domain account on an NT4 ... domain - the first is to run Server Manager either from ... >We are not running DCHP here. ...
    (microsoft.public.windowsxp.network_web)
  • Re: IIS6 Basic Authentication and Kerberos
    ... access the site is a Domain Account on my Windows 2003 domain. ... The IIS server ... Someone types in the wrong password for the domain account used to login ... On the web server a security event log is logged. ...
    (microsoft.public.inetserver.iis.security)