On Windows 2003 - the default asp.net user is NETWORK SERVICE - or whatever
you configure in the IIS Application Pool.
-----
Dominick Baier (
http://www.leastprivilege.com)
Developing More Secure Microsoft ASP.NET 2.0 Applications (
http://www.microsoft.com/mspress/books/9989.asp)
Quote:
I have a client that uses a dot net web app on a windows 2003 server.
Every day they get a dotnet message from the users browser that tells
us that the aspnet user does not have security rigths to c:\windows
\temp
I look at the security tab and see that the local user aspnet is gone,
re-add it and things work. the next day the same thing happens again.
They are using active directory and the admin tells me that he didn't
change anything?
Regards,
-JP |