Return to
HomePage
ASPNET2SecurityFAQs

---

Question: How do I run an ASP.NET application with a particular identity?

Answer:

In IIS 6.0, use IIS Manager to create an application pool running as a specific identity. Use IIS Manager to assign your application to that application pool.
Running ASP.NET application with a specific identities helps to isolate your application isolation, allows you to restrict application resources to your application's account, allows you to use Windows auditing to track the activity of the application separately from other applications.
In IIS 5.0, you can configure the ASP.NET process identity by setting the userName and password attributes on the <processModel> element in Machine.config. If you do this, you should encrypt the credentials by using the aspnet_setreg.exe utility.

More Information

For more information on creating secure accounts for your ASP.NET applications, see “How To: Create a service account for an ASP.NET 2.0 application” at http://msdn.microsoft.com/library/en-us/dnpag2/html/PAGHT000009.asp

---

Return to
HomePage
ASPNET2SecurityFAQs