Re: ASP.NET IIS6 Impersonation - Explanation needed for this situation

From: Paul Clement (UseAdddressAtEndofMessage_at_swspectrum.com)
Date: 11/28/05 

Date: Mon, 28 Nov 2005 12:37:16 -0600

On Sun, 27 Nov 2005 00:32:03 -0800, "Tony Su" <TonySu@discussions.microsoft.com> wrote:

¤ Howdy,
¤ Ran into this queer situation, hoping someone can explain why.
¤
¤ Setup:
¤ ASP.NET application connecting to a SQL database.
¤ Implements Impersonation (SQL account credentials passed in a connection
¤ string).
¤ Website installed on Win2K3
¤
¤ When connected to the SQL database on Win2K,
¤ I found that Impersonation can be turned on or off, it doesn't matter. I
¤ found this to be surprising since I thought that impersonation is managed in
¤ IIS6 on the Win2K3 machine, so it should have mattered whether impersonation
¤ was enabled or not.
¤
¤ When connected to the SQL database on Win2K3,
¤ The Impersonation setting <does> matter, must be enabled.
¤
¤ I would have thought that it should not have mattered whether the database
¤ was located on Win2K or Win2K3, it should have mattered whether the <website>
¤ was deployed on Win2K or Win2K3.

If you're using SQL authentication and not Windows authentication then the impersonation setting
shouldn't matter. Are you certain you're using only SQL authentication?

The default account used (no impersonation) for application processes under IIS 6.0 is Network
Service instead of ASPNET (as under IIS 5.0).

Paul
~~~~
Microsoft MVP (Visual Basic)

Relevant Pages

  • Re: AS2k Security with ADOMD.NET
    ... authentication but that requires a Windows 2000 domain with Active Directory ... > can get connected to AS2000 and fetch data & when I disallow impersonation ... I suppose that the users are connecting from the ASP.NET machine? ...
    (microsoft.public.data.xmlanalysis)
  • Re: problem connecting with AdomdClient
    ... I was able to connect by implementing Impersonation in ... Setting up security when IIS is in between a bit tricky. ... I'm connecting to the web page with my windows connection ... AdomdClient like ...
    (microsoft.public.sqlserver.olap)
  • Re: problem connecting with AdomdClient
    ... I was able to connect by implementing Impersonation in ... Setting up security when IIS is in between a bit tricky. ... I'm connecting to the web page with my windows connection ... AdomdClient like ...
    (microsoft.public.sqlserver.olap)
  • Re: problem connecting with AdomdClient
    ... I was able to connect by implementing Impersonation in ... Setting up security when IIS is in between a bit tricky. ... I'm connecting to the web page with my windows connection ... AdomdClient like ...
    (microsoft.public.sqlserver.olap)
  • Re: problem connecting with AdomdClient
    ... I was able to connect by implementing Impersonation in ... Setting up security when IIS is in between a bit tricky. ... I'm connecting to the web page with my windows connection ... AdomdClient like ...
    (microsoft.public.sqlserver.olap)