App Pool Identity - ApplicationPoolIdentity or NetworkService does it matter?

sbornstein2
sbornstein2 used Ask the Experts™
on
Hello all,

I have an important question in regard to security and my web app.   So I have a web app that I am using the Global.asax to encrypt via DPAPI the connectionStrings section of my web.config at the machine level.    I was getting an error could not access the web.config when deploying it to a server we have.   I also found other errors in the past where when i changed the identity from ApplicationPoolIdentity to NetworkService things were resolved permission wise.    Is there any drawback from doing this?   I want to make sure I have my ducks in a row if I need to explain why it's okay.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Did you check file permission on the folder where web.config file is located, IIS_IUSRS  local group should have read permission on the folder and web.config file.

Using network service as application pool identity can cause issues when you are trying to access resources from network using trusted connection option.

Author

Commented:
thanks

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial