Re: Howto refresh IIS 6 Application pool identity credential info

Hi Peter,

What's the result if you change it to another user account instead of
invalid password? Will it still logon the previous account?

I think dynamically changing the application pool identity in web
application code is a good enough design. If your web application need to
access resource with special required privilege, impersontion is the
recommended approach. Other than saving the username password in
configuration file, you should consider directly implement impersonation in
your code. Please refer to "Impersonate the Authenticating User in Code" in
below article:

How to implement impersonation in an ASP.NET application
http://support.microsoft.com/kb/306158/en-us

The code of .net fx 3.5:

WindowsIdentity..::.Impersonate Method
http://msdn2.microsoft.com/en-us/library/w070t6ka.aspx

Please let me know if you have any further concern on this.

Have a nice day.

Sincerely,

WenJun Zhang

Microsoft Online Community Support

==================================================

Get notification to my posts through email? Please refer to:
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at:

http://msdn.microsoft.com/subscriptions/support/default.aspx.

==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

.

Relevant Pages

  • RE: Impersonation and remote registry access
    ... Reading "App Lockdown", I found that remote registry uses named pipes. ... I'm confident (from examining the thread token during impersonation) that ... Microsoft Online Community Support ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.platformsdk.security)
  • RE: Performance of RevertToSelf and ImpersonateLoggedOnUser
    ... ntdll!NtSetInformationThread to interrupt to kernel-mode. ... the impersonation information and access token pointer in ETHREAD/EPROCESS ... Microsoft Online Community Support ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.win32.programmer.kernel)
  • Re: Cross VPN Domain Authentication
    ... How to implement impersonation in an ASP.NET application ... Microsoft Online Community Support ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.sqlserver.security)
  • Re: How can I modify the user rigths on a xml file?
    ... Do you mean that you wanted to allow a user in normal Users group to be ... To perform impersonation in .Net, you may first p/invoke LogonUser Win32 ... Microsoft Online Community Support ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: IIS inherits low integrity level from IE running in protected
    ... When a service thread impersonates a local client, ... the impersonation thread has the client's security context, ... the client's integrity level if the client is running on the same local ... Microsoft Online Community Support ...
    (microsoft.public.inetserver.iis.security)