IIS Security Question

From: digitalfish (digital.fish_at_ntlworld.com)
Date: 10/29/03

  • Next message: Jerry: "Re: Updating a User and giveing him access to different db" 
    Date: Wed, 29 Oct 2003 22:47:01 -0000

    I have a windows 2000 server box running SQL 2000. This box is a domain
    controller, running AD, DNS, DHCP etc. SQL is currently using mixed-mode
    authentication, although this can be changed if necessary. My web server box
    is a separate machine also running windows 2000 server, running IIS 6. I
    have created a user role in my database with only select permissions on a
    few tables - this role will be my 'internet user' account.

    How do I configure IIS (& ASP) on my web server to use this 'internet user'
    role to connect to my database? Do I have to create a new user account in
    SQL and then hard-code the username and password in my ASP scripts, or can I
    specify that IIS runs under a certain user account and then use windows
    authentication to communicate with SQL?

    Thanks for any help,
    df

  • Next message: Jerry: "Re: Updating a User and giveing him access to different db"

    Relevant Pages

    • RE: Beginners Questions
      ... We do use Windows form on the presentation layer which is on ... terminal server and call web services on the business logic side. ... of using "proxy" authentication on SQL Server. ... > I have written an app with a Windows Forms UI that is deployed to clients ...
      (microsoft.public.dotnet.distributed_apps)
    • Re: Windows Authentication and software in a hosted environment.
      ... What type of authentication are you using for the VPN? ... If you are using something like ISA server then the user is passing windows ... In my experience with hosted DB solutions almost always SQL auth is used. ...
      (microsoft.public.sqlserver.security)
    • Re: Accessing SQL Server w/ Forms on Intranet
      ... Windows Integrated Authentication as that is what our network runs on. ... > of authentication are you using on SQL Server - Windows? ...
      (microsoft.public.dotnet.distributed_apps)
    • Re: Connecting to SQL Without Windows Authentication
      ... Are you connecting to the SQL ... Server via named ... >> I have a Windows 2000 server ... If I connect using SQL Authentication, ...
      (microsoft.public.sqlserver.security)
    • Re: SQL / IIS Application Pool Identity
      ... Set the authentication tag in web.config to "windows" (this way it actually ... to sql, which will obviously be different for each user. ... I want to use the application pool identity to make the> connection to the SQL server database. ...
      (microsoft.public.dotnet.framework.aspnet.security)