IIS6 & User Accounts Confusion

External Since: Feb 25, 2004 Posts: 9

Hello,

I've recently upgraded to IISv6.0 and I have a few questions about all the
different options for user accounts.

So far, I've noticed that you can configure user accounts in the following
places:

1) The application pool. Each application pool can have a security account.
From what I can tell, this generally defaults to "Network Service".

2) Directory Security "Anonymous Access" user account.

3) ASPNET user account

SO - my question is: How do the above relate to each other? If I assign NTFS
permissions, which order is the above processed in?

For example, our IIS box runs alot of ASP.NET (.aspx) pages. When I run a
piece of code, which of the above 3 accounts will it run under? What is the
difference between them (esp. 1&3).

Thanks in advance, and sorry for my newbie question.

-ZD

External Since: Apr 12, 2004 Posts: 214

Z D wrote:

> Hello,
>
> I've recently upgraded to IISv6.0 and I have a few questions about all the
> different options for user accounts.
>
> So far, I've noticed that you can configure user accounts in the following
> places:
>
> 1) The application pool. Each application pool can have a security account.
> From what I can tell, this generally defaults to "Network Service".

# This is an identity your application is running from.

>
> 2) Directory Security "Anonymous Access" user account.

# This is an identity from which all the files under web root is being
accessed

> 3) ASPNET user account

# The same idea as in the previous case:

<a style='text-decoration: underline;' href="http://www.cadforum.cz/cadforum_en/qaID.asp?ID=3738" target="_blank">http://www.cadforum.cz/cadforum_en/qaID.asp?ID=3738</a>

"... It is an automatic machine account created to limit access rights
of .NET applications...."

> SO - my question is: How do the above relate to each other? If I assign NTFS
> permissions, which order is the above processed in?
>
> For example, our IIS box runs alot of ASP.NET (.aspx) pages. When I run a
> piece of code, which of the above 3 accounts will it run under? What is the
> difference between them (esp. 1&3).
>
> Thanks in advance, and sorry for my newbie question.
>
> -ZD
>

-Andrey