Re: Performance counters

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Steven Cheng[MSFT] (v-schang_at_online.microsoft.com)
Date: 12/06/04 

Date: Mon, 06 Dec 2004 06:50:30 GMT

Thanks for your response Dmitry,

If you don't want to use SYSTEM, and since its a DC box, maybe you need to
provide a domain account to run the asp.net application(set it as teh
process identity in the IIS6's application pool setting). Generally, adding
the account into IIS_WPG group should be sufficient, you can try that and
testing your web app to verify this. If there occurs any problems on
permission, you can have a look at the following kb article which has a
complete description on the default aspnet process identify's access rights:

#Process and request identity in ASP.NET
http://support.microsoft.com/default.aspx?scid=kb;en-us;317012

BTW, if possible, I still recommend that you consider moving those service
based application(such asp.net) from DC box to a normal server machine.
That'll help avoid some unexpected issues.

Hope helps.

Regards,

Steven Cheng
Microsoft Online Support

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)

Relevant Pages

  • C# and System.Data.SqlClient.SqlException
    ... TopologyManager topology = new TopologyManager; ... I am an administrator on the SPS server, but I don't have access rights ... Why isn't portal using the correct domain account? ...
    (microsoft.public.sharepoint.portalserver.development)
  • RE: Local Account Vs Domain Account
    ... Well, since you can specify the access rights in the local machine for the domain account, the possible security issues of Domain/Local Accounts are the same. ...
    (Focus-Microsoft)
  • Re: AD Login failure when using ActiveDirectoryMembershipProvider
    ... the problem is that XP is just not a realistic test environment! ... IIS6 on Windows Server 2003 behaves totally different as it uses a machine account that is a domain member when the machine gets joined to the domain (or you manually set a domain account of your choice for the worker process). ... Anonymous access account is my domain account (for testing purposes ... the process identity to connect to AD. ...
    (microsoft.public.dotnet.framework.aspnet.security)