Fog Creek Software
Discussion Board

Welcome! and rules

Joel on Software

Anonymous access & the ASPNET account

It seems that although I allow anonymous access with an IUSR account in websites on my own Win XP computer, I still need to give directory permissions to the ASPNET account if I try to browse an aspx page on my computer.

For example, http://localhost/mysite/default.aspx

I can only "browse" this site, if ASPNET has been given access to the directory.

Does this mean that ASP.NET ignores the IUSR_XXX account I would want it to use for anonymous access?

Charles Reich
Thursday, February 6, 2003

The identity that ASP.NET runs with is thoroughly configurable. To get what you want, you need to turn impersonation on in the web.config file; this will cause ASP.NET to use whatever identity IIS supplies, which in the case of anonymous authentication is the IUSR_machine account. Searching on "web.config impersonation" in the help will give you the details.

Mike Gunderloy
Thursday, February 6, 2003

Thanks for the quick response Mike

Charles Reich
Thursday, February 6, 2003

*  Recent Topics

*  Fog Creek Home