Re: IWAM running as IUSR
From: at (tarasul@hotmail.com)
Date: 02/23/03
- Next message: horace onobrakpeya: "password"
- Previous message: Carrie Garth: "Re: Allow standard user to modify the power settings on laptop"
- In reply to: at: "IWAM running as IUSR"
- Next in thread: BB: "Re: IWAM running as IUSR"
- Reply: BB: "Re: IWAM running as IUSR"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "at" <tarasul@hotmail.com> Date: Sun, 23 Feb 2003 08:43:54 -0600
Resolved myself - process running as IWAM and impersonate aonymous user as
IUSR. sic
"at" <tarasul@hotmail.com> wrote in message
news:#KZyXUr2CHA.1912@TK2MSFTNGP12.phx.gbl...
> Hello,
>
> I'm running IIS5 on standalone Win2K server. It was absolutely clear for
me
> that when I run web application in high isolation it's running as IWAM.
> Checking component services snap-in confirms this again
> Then I've wrote 4 lines asp which opens trusted connection to local SQL
> Server. SQL Server configured to allow connection from both IUSR and IWAM
> accounts. SQL connection is made as IUSR, not IWAM (!!!)
> Another 2 lines asp access file system (objFSO.OpenTextFile) and it's
again
> happen as IUSR (I've enabled auditing on the file).
>
> The TokenMon do show that some activity happen on IWAM account for
> dllhost.exe, but then this thread again impersonate as IUSR.
>
> So what is running as IWAM account? What's going on? I've never see this
> documented.
>
> Also the legend that isolated process have low priviledge is a bit
> exaggarated - a lot of activity on "isolated" dllhost.exe is happen under
> SYSTEM account.
>
>
> Thanks
> Alexander
>
>
- Next message: horace onobrakpeya: "password"
- Previous message: Carrie Garth: "Re: Allow standard user to modify the power settings on laptop"
- In reply to: at: "IWAM running as IUSR"
- Next in thread: BB: "Re: IWAM running as IUSR"
- Reply: BB: "Re: IWAM running as IUSR"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|