ASP.NET 2010 Impersonation question
This is the email I actually received
"Currently the app is enabled for anonymous authentication, which means every connection is using the local NETWORK SERVICE account, an account that doesn’t have network privileges.
If it’s working, then there is something in the code making it work, probably impersonating a network account."
Anyway, I am very new to asp development so any help would be appreciated.
You can change it, but how you change it will depend on what you want to do.
You'll make your changes in the web.config file. There are several "right" answers here, so the best thing to do would probably be to read these and then decide which method fits your needs.
http://msdn.microsoft.com/en-us/library/eeyk640h(v=vs.100).aspx
http://msdn.microsoft.com/en-us/library/907hb5w9(v=vs.100).aspx
http://msdn.microsoft.com/en-us/library/9wff0kyh(v=vs.100).aspx
I wanted to let you know the next correspondence I just got:
Question
>>Is there a 'whatever' account/user group? If it’s a user group, please send me the list of people assigned to it.
'whatever' should have access to the shares specified below.
Answer
>>'whatever' is an account and it already has those permissions to the objects.
Forward to me
>>
Can you please check if the application is using that account to get to the shares? I still believe the application is doing impersonation.
Im not sure what to do from here but I will read on...
See image attached
The first would cause this error, the second shouldn't. Anyone who logs into the site will be running the site on the server as the NETWORK SERVICE account unless you configure it otherwise.
So technically YOU aren't impersonating but the application is.
If you debug the site in VS on your local machine, it runs under your credentials.
A couple of quick solutions would be to
give the asp.net NETWORK USER limited rights as an active directory user
or you could use impersonation in your application (in web.config) and run the application as an active directory user who has the proper rights.
Either of those two things should get you up and running.
You still need to get the app to run as a member of that group - right now it isn't. It runs as the default asp.net machine name.
Gain unlimited access to on-demand training courses with an Experts Exchange subscription.
Get AccessWhy Experts Exchange?
Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.
When asked, what has been your best career decision?
Deciding to stick with EE.
Being involved with EE helped me to grow personally and professionally.
Did You Know?
We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE
Ask ANY Question
Connect with Certified Experts to gain insight and support on specific technology challenges including:
- Troubleshooting
- Research
- Professional Opinions
Join our community and discover your potential
Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.
*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.