Re: IWAM running as IUSR

From: at (tarasul@hotmail.com)
Date: 02/23/03


From: "at" <tarasul@hotmail.com>
Date: Sun, 23 Feb 2003 08:43:54 -0600


Resolved myself - process running as IWAM and impersonate aonymous user as
IUSR. sic

"at" <tarasul@hotmail.com> wrote in message
news:#KZyXUr2CHA.1912@TK2MSFTNGP12.phx.gbl...
> Hello,
>
> I'm running IIS5 on standalone Win2K server. It was absolutely clear for
me
> that when I run web application in high isolation it's running as IWAM.
> Checking component services snap-in confirms this again
> Then I've wrote 4 lines asp which opens trusted connection to local SQL
> Server. SQL Server configured to allow connection from both IUSR and IWAM
> accounts. SQL connection is made as IUSR, not IWAM (!!!)
> Another 2 lines asp access file system (objFSO.OpenTextFile) and it's
again
> happen as IUSR (I've enabled auditing on the file).
>
> The TokenMon do show that some activity happen on IWAM account for
> dllhost.exe, but then this thread again impersonate as IUSR.
>
> So what is running as IWAM account? What's going on? I've never see this
> documented.
>
> Also the legend that isolated process have low priviledge is a bit
> exaggarated - a lot of activity on "isolated" dllhost.exe is happen under
> SYSTEM account.
>
>
> Thanks
> Alexander
>
>



Relevant Pages

  • Re: IIS Error - 500 when running a CGI/EXE after upgrading XP to
    ... or something custom was run on your server to change this setting (but never ... of which it is not adding IUSR and IWAM to. ... IIS and CGI worked. ...
    (microsoft.public.inetserver.iis)
  • Re: IWAM running as IUSR
    ... Resolved myself - process running as IWAM and impersonate aonymous user as ... > I'm running IIS5 on standalone Win2K server. ... SQL Server configured to allow connection from both IUSR and IWAM ... > So what is running as IWAM account? ...
    (microsoft.public.inetserver.iis.security)
  • Re: Low Vs Medium Isolation Level
    ... Yes, when running medium pool or high isolation, the process ... iwam is the bus driver and iusr is the passenger. ...
    (microsoft.public.inetserver.iis.security)
  • Re: MAJOR Questions for an MS-MVP
    ... I wonder if the password for the IWAM user was changed. ... .ASP pages from running if the Application Isolation setting on the folder ... change the password for the IWAM account to match this password using the ... > server to server. ...
    (microsoft.public.inetserver.iis.security)
  • IWAM running as IUSR
    ... I'm running IIS5 on standalone Win2K server. ... that when I run web application in high isolation it's running as IWAM. ... SQL Server configured to allow connection from both IUSR and IWAM ... So what is running as IWAM account? ...
    (microsoft.public.inetserver.iis.security)