Re: IIS 6.0 and SQL server

• Previous message: Joseph: "Non-SSL to SSL"
• In reply to: Matthew Willey: "IIS 6.0 and SQL server"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Thu, 21 Aug 2003 11:40:03 -0400

I don't know much about IIS 6, but I would think either IUSR needs to be a
domain account, or it needs to be a local account on both machines with
identical name and password. [This requirement for having a Windows account
should be true both if you are using Windows authentication in SQL, and also
if you are using SQL authentication in SQL but the SQL client on the IIS
server is set to use Named Pipes or Multi Protocol instead of TCP/IP.] This
means IIS MMC cannot be set to manage the password, and you might need to
use the MMC or the ADSUTIL.VBS command to change the password in the IIS
Metabase and the Windows MMC to change the Windows local user password. You
might also enable Windows auditing, for example on the target SQL server, to
see if the account you think is being used is the one that is actually being
used.

Info on ADSUTIL.VBS [assuming this still works under IIS 6?]
http://securityadmin.info/faq.htm#iwam

http://securityadmin.info/faq.htm#auditing

"Matthew Willey" <mwilley@msdpt.k12.in.us> wrote in message
news:fb68deec.0308210455.28ade52c@posting.google.com...
> Ok, I am pulling my hair out here. I have a 3rd party app, that uses
> ASP.NET. I cannot make it happy with authentication to our SQL
> server. The vendor can barely support the product, but I am stuck
> with it.
>
> Both machines are in the same domain, and I have tried adding IIS_WPG,
> IUSR_..., etc to the enterprise manager and giving database rights,
> but the program still says unable to connect. The vendor keeps
> telling me this will only work in a standalone server environment as
> it depends on local users, but this makes no sense to me. Ideally, I
> would like both of these machines to be domain controllers for my AD
> domain. There has to be some way to make asp.net and SQL work on
> seperate boxes in a domain environment. Sorry this is vague, but I am
> stuck trying to make bad code work. Thanks for any advice.

• Previous message: Joseph: "Non-SSL to SSL"
• In reply to: Matthew Willey: "IIS 6.0 and SQL server"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]