ASPNET & NETWORK SERVICE accounts hitting SQL Server

From: Jim Moon ("Jim)
Date: 06/30/04 

Date: Wed, 30 Jun 2004 14:15:33 -0500

Hello.

Running IIS 6 and ASP.NET, the only way an application can access SQL Server
seems to be as "NT AUTHORITY / NETWORK SERVICE" (or an alias specified in
the <identity> element within "web.config"). This is analagous to the
"ASPNET" user for IIS 5 and ASP.NET.

In a secure (SSL) web running in IIS 6 with authentication, we're interested
in getting from ASP.NET the behavior we get from ASP 3.0. When the ASP
application logs onto the SQL Server database, it does so under the logon of
the actual user. There does not appear to me to be a way to make this
happen. And, as a result, we feel as though we have lost a layer of
security--the security of the database!

Any ideas or suggestions are welcome.

Thanks,
Jim

Relevant Pages

  • Re: Mobile data replication/synchronization
    ... the computer running IIS has failed" with no luck. ... My IIS is version 5.1 and I'm using SQL Server 2005/SQL Server Compact ... I'm running everything out of my laptop and an emulator. ... I have one unresolved error when I run the SQL Server Mobile Server Agent ...
    (microsoft.public.pocketpc.developer)
  • Remote development advice
    ... My friend and I are entrusted to develop a small web based application ... using ASP and SQL Server database. ... We are using IIS as the web server. ... The IIS and SQL Server is setup in his ...
    (microsoft.public.dotnet.general)
  • Re: 2 newbie questions
    ... Tom Kaminski IIS MVP ... http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS ... "Karl" wrote in message ... IIS is runing fine as is SQL Server 2000. ...
    (microsoft.public.inetserver.iis)
  • ASPNET & NETWORK SERVICE accounts hitting SQL Server from IIS
    ... Running IIS 6 and ASP.NET, the only way an application can access SQL Server ... application logs onto the SQL Server database, it does so under the logon of ...
    (microsoft.public.sqlserver.security)
  • ASPNET and NETWORK SERVICE accounts hitting SQL Server
    ... Running IIS 6 and ASP.NET, the only way an application can access SQL Server ... onto the SQL Server database, it does so under the logon of the actual user. ...
    (microsoft.public.dotnet.framework.aspnet.security)