?
Solved

specify account other than iuser for .asp page?

Posted on 2004-09-03
6
Medium Priority
?
492 Views
Last Modified: 2008-02-01
is it possible to have a .asp page (only one) handled by iis in a different security context than iuser? i want one (only) script on an .asp page to have access to a folder that i have explicitly denied access to the iuser account (ie i want this asp page to operate as a user with higher credentials).

iis 6 on win2k3 server

thanks in advance
0
Comment
Question by:jlathigee
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
6 Comments
 
LVL 15

Accepted Solution

by:
mattisflones earned 375 total points
ID: 11979068
Yes, put the page in a virtual subdir of yor site and set the secsettings as you want there... You can NOT set settings for a single page in a site by itself in IIS.
0
 
LVL 36

Expert Comment

by:Zyloch
ID: 11979074
Hi

Ahh, well, just have this in your protected ASP page:

<%
Dim siteBase = "http://www.yourdomain.com/"
If Request.ServerVariables["HTTP_REFERER"] <> siteBase & "yourhigherpermissionpage.asp" Then
    Response.Redirect(Request.ServerVariables["HTTP_REFERER"])
End If
%>

Regards,
Zyloch
0
 
LVL 15

Expert Comment

by:mattisflones
ID: 11979079
Or.. just do a include of the page..
0
Percona Live Europe 2017 | Sep 25 - 27, 2017

The Percona Live Open Source Database Conference Europe 2017 is the premier event for the diverse and active European open source database community, as well as businesses that develop and use open source database software.

 
LVL 15

Expert Comment

by:mattisflones
ID: 11979125
Glad i could help! :-)
0
 
LVL 34

Expert Comment

by:Dave_Dietz
ID: 11982695
Though the answer has already been accepted I thought I would post a correction:

You *can* set the anonymous user identity for a single page in IIS. You can set Authentication methods at the page level and this is where you specify the account used for anonymous access (if you are using anonymous).

For this particular question there is no need to create an entire vdir to host a single page, simply change the anonymous user account for that specific page.

Dave Dietz
0
 
LVL 15

Expert Comment

by:mattisflones
ID: 11989629
Dave, how do you do that secure? That would be very interesting to know..
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Prologue It is often required to host multiple websites on a single instance of IIS, mostly in development environments instead of on production servers. I am sure it is not much a preferred solution on production servers but this is at least a pos…
As tax season makes its return, so does the increase in cyber crime and tax refund phishing that comes with it
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Have you created a query with information for a calendar? ... and then, abra-cadabra, the calendar is done?! I am going to show you how to make that happen. Visualize your data!  ... really see it To use the code to create a calendar from a q…
Suggested Courses
Course of the Month15 days, left to enroll

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question