In my local machine, I have always seen IIS use ASPNET as default user for website; but I just found that it uses 'NT AUTHORITY\NETWORK SERVICE' on the server.  Is it safe to generalize and say that :

Windows 2000, WindowsXP  --> MACHINE NAME\ASPNET

Windows 2000 Server, Windows 2003 Server --> 'NT AUTHORITY\NETWORK SERVICE'

Please advise.  Thank you.


1/3/2007 11:14:17 PM
asp.net.security 27051 articles. 1 followers. Follow

3 Replies

Similar Articles

[PageSpeed] 14

Some minor correction Win2k including Advanced Server and XP are IIS5 so it is Asp.net account, the Network Service Account was introduced in Win2003 which is IIS6 and the Anonymous users were also removed from the default everybody group. The link below is IIS6 docs that will help you, but most question I cannot answer now I can answer in details I have the Win2003 MOC (Microsoft official curriculum). Hope this helps.


Kind regards,
Gift Peddie
1/4/2007 2:16:15 AM

Thanks Caddre.  So I'll check IIS version to determine which account is used:

IIS 5 -- Machine Name\Asp.net
IIS 6 -- NT Authority\Network Service

What confuses me is that, I also found Asp.net account in Win2003 server.  If it is not used, why it is there.

1/4/2007 3:33:42 PM
..Microsoft products install a lot of system accounts for products when you install the product or component but most are not used some times disabled by security teams in big companies but they are harmless. If you have SQL Server also installed you will see the SQL Debugger account, but SQL Server Debugger is still work in progress most people don't use, I think the accounts are provided to used as needed. Hope this helps.
Kind regards,
Gift Peddie
1/4/2007 4:02:40 PM

Similar Artilces:

Name: haznen Email: haznenatyahoodotcom Product: Gran Paradiso Alpha 8 Summary: '''''''''''''''''''' Comments: '''''''''''''''''''''''''''''''''''' Browser Details: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20061204 UGES/ GranParadiso/3.0a1 From URL: http://www.mozilla.org/projects/granparadiso/ Note to readers: Hendrix gives...

Name: mario Email: ramar17atfastwebnetdotit Product: Gran Paradiso Alpha 2 Summary: ''''' Comments: K: Browser Details: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a2) Gecko/20070206 GranParadiso/3.0a2 ...

'do' won't 'do' if '/'
Greetings to All from Au, Have a NetWare Perl 5.8.4 and wanted to tweak File\Spec\NW.pm to try and standardise on '/' separators. If I run a test script (t/uni/lower.t) with an unmodified NW.pm, it calls t/uni/case.pl, that, in case.pl, (when the path separators are '\'), the $file is '..\lib\unicore\To\Lower.pl' and the following code portion works, with $simple getting a returned table: sub casetest { my ($base, $spec, $func) = @_; my $file = File::Spec->catfile(File::Spec->catdir(File::Spec->updir, "lib", &qu...

Name: L Lachowsky Email: e2brutus_10atyahoodotcom Product: Firefox Summary: ''' Comments: why duddn this surprise me... I change default server from IE to Mozilla, and then i get error messages. well, shud I decide to not get on my computer with Mozilla..or shud I risk security breeches with IE....hmmm at least i can get on the internet with IE Browser Details: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv: Gecko/2008120122 Firefox/3.0.5 From URL: http://hendrix.mozilla.org/ Note to readers: Hendrix gives no expectation of a response to this fee...

Cannot open database 'ASPState'. The Login failed for user 'NT AUTHORITY\NETWORK SERVICE'
This problem ONLY occurs when my site is being hosted on the server (IIS V6.0) with the database (MS SQL 2005) and not when the database is hosted on the server but the website locally on my development machine. This error doesn't occur when my Web.config uses the following: <sessionState mode="InProc" cookieless="false" timeout="2" /> But I'm trying to use the SQL server to store session data as so: <sessionState mode="SQLServer" stateConnectionString="tcpip=" sqlConnectionString="data source=peniisw2...

Not able to add Login user 'NT AUTHORITY\Network Service' to role 'aspnet_Membership_FullAccess'
I am trying to add Login user 'NT AUTHORITY\Network Service' to role 'aspnet_Membership_FullAccess' using the following statements. I have attached database ASPNET.mdf to SSMS.  -- Create a SQL Server login for the Network Service accountsp_grantlogin 'NT AUTHORITY\Network Service'-- Grant the login access to the membership databaseUSE aspnetdbGOsp_grantdbaccess 'NT AUTHORITY\Network Service', 'Network Service'-- Add user to database roleUSE aspnetdbGOsp_addrolemember 'aspnet_Membership_FullAccess', 'Network Service' I am ge...

Cast from type ''''DBNull'''' to type ''''String'''' is not valid.
How do I avoid getting this error: Cast from type ''''DBNull'''' to type ''''String'''' is not valid. I am trying to get values from the database into a form for updating using a Datareader, SQL is set to allow nulls for certain fields as they are not required but the only way I can get the form to display is by adding a space in SQL. Is there another way around this? Check if it is equal to DBNull.Value first and if it is, don't do the cast.Stanley Tan theSpoke Blog Where in the code does it need to go? I am using the following and it's the profile that isn't always requi...

table_info('','','','%') cannot return any types
I was recently confirming table_info special cases and discovered the case for getting table_types cannot work. table_info('','','','%') should return a list of table types but it returns a list of empty strings instead: my @types = $h->tables('', '', '', '%'); print "all types:\n", join("xxx\n", @types), "\n"; # should output something like: # "dbo" # "INFORMATION_SCHEMA" # "sys" # and actually outputs: xxx xxx It seems to be down to the following ...

'returns' vs 'of'
I don't like the assignments of 'returns' and 'of'. I think it is easily confused. I've written foo (Int $x) returns Int in examples and nobody noticed. As formal documentation, that scans right as the outer perceived return value type. But no, it's supposed to be foo (Int $x) of Int instead. The returns keyword affects the implementation of the function, not the external contract. Yet, if returns is missing it uses the of value by default, but if the of is missing it does not give static type checking to the caller, rather than using the sam...

Hello. I'm using defferent 5.6.0's for Win32. I wonder wheter following behaviour is intentional or not: d:\>perl -e "print 'b'..'c'" bc d:\>perl -e "print 'b'..'a'" bcdefghijklmnopqrstuvwxyz I expected empty list in latter case, like in perl -e "print 'bb'..'a'" <!ENTITY Vadim REALLIFE "Vadim V.Konovalov, St.Petersburg, Russia"> &Vadim; On Wed, Sep 20, 2000 at 03:14:41PM +0400, Konovalov, Vadim wrote: > Hello. > > I'm using defferent 5.6.0'...

'or' or 'union'
Hello I was just wondering, in general what is better to use, an 'or' clause in a select or a 'union' to join two selects together. Do both statements create work tables? Many thanks Alex I think OR will be better than union. because suppose u have 3 tables and using OR u can join table a and table b and table c so each table will have only one read. but using union you will join table a and table b and in another query of union u will use table (a or b) and table c so ur one read is more in union . Ramdas Alex Cheung wrote: > Hello > >...

'IN' Clause or 'OR'
Hello, [1]: select * from TABLEA where COL1 IN('value1','value2''valu3'....) [2]:select * from TABLEA where COL1 = 'value1' OR COL1= 'value2' OR COL1='valu3'. TABLEA is a huge table and it has non-clustered index on COL1. Among the above 2 queries, which query will give me the better performance or fast response and WHY? What is the difference between 'IN' and 'OR' clauses as for as Sybase Optimization is concerned. Which is the better one to be used on huge tables. Thanks. Mac An IN list is treated ...

Cannot open database requested in login 'AstraTrain'. Login fails. Login failed for user 'NT AUTHORITY\NETWORK SERVICE'. "
Hi I just made some changes to my Website.... I configured my website to run under SQL server authentication....so i created an user under SQL server named it "sqltestapp".Then I was trying to connect to the database using this user account. So I made theconnection string as <add name="AstraTrainConnectionString" connectionString="Data Source=ITAPPDEV;Initial Catalog=AstraTrain;User id=sqltestapp; password= sqltestapp;Integrated Security=false"providerName="System.Data.SqlClient" />Now I am using  SQL authentication to connect to the ...

'Value' should be between 'minimum' and 'maximum'.
I'm attempting to invoke with parameters:  Dim thing2 As New mydelsubPBStep(AddressOf pbStep) Me.Invoke(thing2, "setMax", dt.Rows.Count)      <---- this is where the error occurs   the delegate looks like this: Private Delegate Sub mydelsubPBStep(ByVal mode As String, ByVal value As Integer)   the function it's calling looks like this:Private Sub pbStep(ByVal mode As String, ByVal value As Integer) Select Case mode.ToLower Case "clear" ProgressBar1.Value = 0 Case "step" ProgressBar1.PerformStep() L...

Web resources about - 'NT AUTHORITY\NETWORK SERVICE' vs 'MACHINE NAME\ASPNET' - asp.net.security

Resources last updated: 12/27/2015 11:59:53 PM