IIS setup - Web site running under wrong account?
I seem to be having some security issues with a new Web server that I am setting up as a replacement for a current server.
The new server is Windows Server 2008 SP2 32bit.
I added a line of code to both the Old server, and the New server.
lblUserName.Text = System.Security.Principal.
On the old server, the returned value is NT AUTHORITY\NETWORK SERVICE
On the new server, the returned value is mylocaldomain\myusername
I have only a slight understanding of how IIS is setup.
What do I need to look at in order to have the web site run under the Network Service account?
The new server is Windows Server 2008 SP2 32bit.
I added a line of code to both the Old server, and the New server.
lblUserName.Text = System.Security.Principal.
On the old server, the returned value is NT AUTHORITY\NETWORK SERVICE
On the new server, the returned value is mylocaldomain\myusername
I have only a slight understanding of how IIS is setup.
What do I need to look at in order to have the web site run under the Network Service account?
Last Comment
rehamris
That info should be able to be found under services.msc. On the 2008SP2 box, Click the "Log On As" column to sort by service account login name. See if yours is listed for World Wide Web Publishing or otherwise?
ASKER
Looking there it shows that the log on as "Local System".
In the properties of the website, check the Security Tab, Anonymous access. It should show in there what account is used for anonymous access for that site. Does it show any differences between the two sites?
ASKER
They are both set to IUSR.
What version of IIS is on the new server? Is it the same version as the old?
It would seem that on the new server you have identity impersonation set to on either in iis or in your web.config of your website.
see : http://technet.microsoft.c
It would seem that on the new server you have identity impersonation set to on either in iis or in your web.config of your website.
see : http://technet.microsoft.c
If you are using IIS7, check the user assigned to the site's application pool.
ASKER
Old server = Server 2003 IIS 6
New server = Server 2008 IIS 7
I am not sure how to check the user that is assigned to the site's application pool.
When I go to the "Advanced Settings" of the application pool, the closest thing I see to a user is the "Identity" which is set to NetworkService.
New server = Server 2008 IIS 7
I am not sure how to check the user that is assigned to the site's application pool.
When I go to the "Advanced Settings" of the application pool, the closest thing I see to a user is the "Identity" which is set to NetworkService.
I think this may help:
http://msdn.microsoft.com/en-us/library/aa302377.aspx
Take note of the following line:
http://msdn.microsoft.com/en-us/library/aa302377.aspx
Take note of the following line:
Note With IIS 6.0 running on Windows Server 2003, the identity Matrix works except that the Machine\ASPNET identity is replaced with NT Authority\Network Service.
MAke sure Identity Impersonation is turned off :
Open IIS Manager
In Features View, double-click Authentication.
On the Authentication page, select ASP.NET Impersonation.
In the Actions pane, click Disable to not use ASP.NET Impersonation authentication with the default settings.
Click OK to close the Edit ASP.NET Impersonation Settings dialog box.
Open IIS Manager
In Features View, double-click Authentication.
On the Authentication page, select ASP.NET Impersonation.
In the Actions pane, click Disable to not use ASP.NET Impersonation authentication with the default settings.
Click OK to close the Edit ASP.NET Impersonation Settings dialog box.
ASKER
Turning off ASP.Net impersonation was no help.
ASKER CERTIFIED SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASP.NET
The successor to Active Server Pages, ASP.NET websites utilize the .NET framework to produce dynamic, data and content-driven web applications and services. ASP.NET code can be written using any .NET supported language. As of 2009, ASP.NET can also apply the Model-View-Controller (MVC) pattern to web applications
128K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
TRUSTED BY
