what is the default user for a .net webpage in iis.

scm0sml
scm0sml used Ask the Experts™
on
Hi,

I have to grant privielges to a certain folder for my website.

What user do I need to give access? Not sure what the default is?

Thanks
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®

Commented:
It depends on the OS ond IIS version.

Author

Commented:
windows webserver 2008 r2 - iis 7
Gary DavisDir Internet Svcs

Commented:
Probably NETWORK SERVICE. Use IIS Manager, select Application Pools and look at the Identity column.You can change the user by clicking Advanced Settings and then Identity.

Gary Davis
Webguild
How to Generate Services Revenue the Easiest Way

This Tuesday! Learn key insights about modern cyber protection services & gain practical strategies to skyrocket business:

- What it takes to build a cloud service portfolio
- How to determine which services will help your unique business grow
- Various use-cases and examples

Dave BaldwinFixer of Problems
Most Valuable Expert 2014

Commented:
The user for 'normal' web pages, especially for external internet access, is the IUSR Anonymous User which generally shouldn't be given any extra privileges.  If someone is logged into Windows on the server, they will have privileges.  And databases can used with SQL privileges set up in IIS and the web page code.

Author

Commented:
My problem is that on some occasions the site may need to be able to write to a folder etc for an image upload etc which falls over if the website doesn;t have rights to a directory?

Author

Commented:
the identity column says applicationpoolidentity?
Dave BaldwinFixer of Problems
Most Valuable Expert 2014

Commented:
In IIS, you can give 'write' permission to a directory.  You probably should Not give execute or script permission to that same directory to prevent people from uploading programs or scripts and running them.

Author

Commented:
when trying to give permission it if i do checkname on applicationpoolidentity it doesnt seem to find it?
Dave BaldwinFixer of Problems
Most Valuable Expert 2014

Commented:
I don't know what that means.  I'm talking about setting properties on a directory.
Commented:
Whenever a new Application Pool is created, the IIS management process creates a security identifier (SID) that represents the name of the Application Pool itself. For example, if you create an Application Pool with the name "MyNewAppPool," a security identifier with the name "MyNewAppPool" is created in the Windows Security system. From this point on, resources can be secured by using this identity. However, the identity is not a real user account; it will not show up as a user in the Windows User Management Console. 

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial