Re: ASP.NET application having sysadmin privileges



Why not just having an account for ASP application /login in SQL Server?

Add NT AUTHORITY/NETWORK SERVICE account to group of Administrators ( I do
not think that it is a good idea)



<siarkazm@xxxxxxxxx> wrote in message
news:21f2a742-14e0-479b-99c5-e75231112c99@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi,

I have a following server configuration:
Windows 2003 Web Edition SP2
MS SQL Server Express 2005 SP2
SQL is running as NT AUTHORITY/NETWORK SERVICE
The only authentication method is Windows Authentication
Following logins are created on the SQL server:
BUILITIN\Administrators
NT AUTHORITY\SYSTEM
SERVNAME\SQLServer 2005MSSQLUser$SERVERNAME$MSSQLSERVER
Sa

I have an ASP.NET 2.0 application running on the same machine. The
application pool is configured to use same account as MS SQL (NT
AUTHORITY/NETWORK SERVICE). This account is not a login on the MS SQL
Server but the Web application have sysadmin access to the database! I
use following connection string in the web.config:
Data Source=.;Initial Catalog=DbName;Integrated Security=SSPI;Min Pool
Size=5;
I have also a backup server with almost identical configuration
(Windows 2003 Standard instead of Web Edition) and I must explicitly
configure login for NT AUTHORITY/NETWORK SERVICE to give the web app
access to the database.

Does anybody have a clue what is wrong with my server?

Cheers,

kuba


.



Relevant Pages

  • Re: Compromise?
    ... Yes, if you don't provide a password on your SA account, anybody able to run ... and connect now has complete control over your SQL Server. ... Server has. ...
    (microsoft.public.sqlserver.security)
  • Re: Windows Auth to SQL Server from ATL Web Service not working...
    ... account I'm logged on as. ... SQL on a different box from my web service in an Atl Server web ... impersonation token is not passed on to the SQL Server. ... Event Category: Account Logon ...
    (microsoft.public.vc.atl)
  • Re: Discussing 3 different strategies for deleting from multiple tables
    ... I will be using SQL Server but I am riding on top of a third party ... FYI, Account contains around 20K ... >>> This results in one parameterized query followed by two more trips to ...
    (microsoft.public.data.ado)
  • RE: connection problems in secondary site and SQL server
    ... Do you have a Windows 2003 server anywhere in your environment? ... i can't add this account to this group. ... SMS Management Point encountered an error when connecting to its Database ... SMS on SQL Server My_Primary_SMS_Server. ...
    (microsoft.public.sms.admin)
  • RE: MP Install issue
    ... Will setting the SPN on the domain account fix the communication issue ... >> MPDB ERROR - CONNECTION PARAMETERS ... >> with a trusted SQL Server connection. ...
    (microsoft.public.sms.setup)