IIS passing server credentials rather than user credentials



We are developing a web app using II6, ASP .Net 2.0 on a Win2003 box.
We are using VS2005 and building for .Net 2.0 framework.

We set IIS up to use integrated security. However when I access the
application through IE, it cannot connect to the server. When I check
the SQL Server logs, I see a failed attempt to login by <domain
name>\<web server name>. It looks like it is using the credentials
under which the web server is running.

he desired behavior is to use the profile of the domain user who is
using IE.

When I give <domain name>\<web server name> explicit access to the SQL
Server DB it, *can* connect.

This reeks of a misconfiguration. What could we be doing wrong?

TIA

.



Relevant Pages

  • Re: UserName and Kerberos tokens at the same time
    ... > What makes me feeling a bit strange is that the WSE 3.0 Kerberos demo also ... Are you logon the computer as a domain user when running the ... I have tried it on a Windows 2003 server as well and there I get the ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: SHAREPOINT AND RWW ISSUES
    ... In WSS 2.0, when you create a Domain User account, the server adds it to SharePoint with 'Web Designer' rights. ... If you want to see or change these permissions for this group, go to 'Site Settings' / 'Go to Site Administration' / 'Manage Site Groups', click on 'Web Designer and then select 'Edit Site Group Permissions' ...
    (microsoft.public.windows.server.sbs)
  • Re: ADSI code that will not work in asp.net
    ... - You can change the security context so that a domain user is used. ... bind and should get you valid credentials that can be used. ... > AD server is going to be doing the authenticating? ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Service Login Account query
    ... A domain has several Windows 2003 services installed on windows serverd, all configured to login with a Domain user account. ... And so if the domain user password changes, all the service properties will have to alter to update the locally stored passwords to syncronise them else the service wont restart. ... But if I dont have the list of server names, is there a central method of listing the server names that have services that are using a particular domain user? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Service Login Account query
    ... don't worry about accounts and passwords. ... Joe Richards Microsoft MVP Windows Server Directory Services ... all configured to login with a Domain user account. ...
    (microsoft.public.windows.server.active_directory)