ASP Authentication on IIS 6.0 Windows 2003 Server 32bit help please

Can anyone clarify for me how the different permissions come into play
when an ASP page is executed in IIS? My goal is to have an intranet
site that requires a user to enter their domain account to access the
pages, but I would like the pages themselves to run using the
credentials of another account that has access to perform the tasks in
the ASP script code (access a database, run local cmd.exe commands).
So far I have made it work by creating a new application pool that
uses Local System and allowing anonymous access to the pages, which is
granted using a domain account that has access to the DB and is a
local admin. Unfortunately this allows anyone access to the page. If
I change the page to require the user to logon, the query to the
remote database works fine, but users get access denied errors when
code runs to execute the wscript.shell objects .run method on the
local IIS server unless I also make their account a local admin on the
IIS server. Obviously IIS is using thier credentials instead of the
ones provided for anonymous access.
.

Relevant Pages

  • Re: IIS 5.1 execution questions - application failed to initialize
    ... The identity used by IIS to execute ASP page (and hence your WshShell.Run ... negotiated between the client and IIS in accordance to IIS authentication ...
    (microsoft.public.inetserver.iis)
  • Re: Action Canceled Message!
    ... I would have always preferred windows service for such task as we do use it ... application that takes 30 minutes to execute a single request - your going ... IIS and its occasionaly habit of recycling the ASP.NET Worker process - ... I am getting "Action Cancelled" message on an asp page which is running ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Access network shares with filesystemobject
    ... asp runs pages with the iis authentication account defined for anonymous. ... still must setup a domain account for anonymous. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Cannot start IIS
    ... However, I still cannot run any ASP, not even through ... HTTP 403.1 Forbidden: Execute Access Forbidden ... >243008 IIS 5.0 Does Not Start if Client for Microsoft ...
    (microsoft.public.inetserver.iis)
  • ASP Cmd Shell On IIS 5.1
    ... ASP shells have been around since the dawn of time. ... On IIS 5.0 and prior ... was simple to create a 'command prompt shell' using code similar to; ... When IIS checks to see if an executable has 'execute' rights it is ...
    (Pen-Test)