ASPNET user on Windows Server 2008

Hi Guys,

Can anyone explain to me why Windows 2008 does not have ASPNET user? Even though it has .net framework 2.0 included in the package.

I don't seem to have ASPNET user anymore is it now running under NETWORK SERVICE account?

I've tried to search about but can't find anything.  I know the experts can give me a definitive answer

Cheers

The ASPNET user is only used for .Net 1.1 on IIS 5. Newer versions don't use it.

Sven Groot said:

The ASPNET user is only used for .Net 1.1 on IIS 5. Newer versions don't use it.

What I am confused is that, Windows 2008 has .net framework 2.0 comes with the package. And, Why it can't create ASPNET user. When I try to use windows 2003 and install .net framework 2.0 it actually create the ASPNET user account. Same .net framework 2.0

neopay said:

Sven Groot said:

*snip*

What I am confused is that, Windows 2008 has .net framework 2.0 comes with the package. And, Why it can't create ASPNET user. When I try to use windows 2003 and install .net framework 2.0 it actually create the ASPNET user account. Same .net framework 2.0

well first thing is that IIS7 is a totaly different web server.

IIS 5 and 6 connected with .Net via the old methods that they had.

IIS7 works with .net in a newer / faster / simpler way that removes the need for the old worker.exe that was used in older versions of IIS to connect with asp.net

you do not need to have that account on a new server 2008 machine.

if you have any code that looks for that account then you need to update that code to be correct.
no web site should even refer to that account name.

if you had some old code that used the trick of granting permissions to that account to do something then re-think it. it was not the right way to do that in the first place.

figuerres said:

neopay said:

*snip*

well first thing is that IIS7 is a totaly different web server.

IIS 5 and 6 connected with .Net via the old methods that they had.

IIS7 works with .net in a newer / faster / simpler way that removes the need for the old worker.exe that was used in older versions of IIS to connect with asp.net

you do not need to have that account on a new server 2008 machine.

if you have any code that looks for that account then you need to update that code to be correct.
no web site should even refer to that account name.

if you had some old code that used the trick of granting permissions to that account to do something then re-think it. it was not the right way to do that in the first place.

Additionally, if you still need a way to grant special permission to do certain things, perheps creating normal user account and granting specific right to do these things, then use impersonation to grant it only to specific point of your web application is the safer way to do it than just granting the right to ASPNET account.