Re: security : a good approach ?

From: Egbert Nierop \(MVP for IIS\) (egbert_nierop_at_nospam.invalid)
Date: 06/09/04 

Date: Wed, 9 Jun 2004 08:58:44 +0200

Re: security : a good approach ?

yes, it's a good one. But seldomly it is needed, to protect your SQL server
against IUSR_x and against IIS using COM+ impersonation.

COM+ impersonation in fact, never is recommended to increase security, it is
used to have IUSR_x doing things on ACTive Directory, (for instance) that
IUSR_ is not allowed to do.

Relevant Pages

  • Queries in regards Intranet Security.
    ... reading the part "Intranet Security: ... For Authentication: ... Use Integrated Windows Auth at IIS. ... Use Windows Auth at ASP.NET (With Impersonation = False) ...
    (microsoft.public.dotnet.security)
  • Few Questions in regards Intranet Security.
    ... reading the part "Intranet Security: ... For Authentication: ... Use Integrated Windows Auth at IIS. ... Use Windows Auth at ASP.NET (With Impersonation = False) ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: mining model process with sql server 2005
    ... > The impersonation information determines what user Analysis Server ... > impersonates on the thread it uses to establish a connection to the data ... If you're not using Windows security and your ... > SQL Server Data Mining ...
    (microsoft.public.sqlserver.olap)
  • Passing IIS Anonymous Account to SQL Server
    ... I was hoping some one could clear up an ASP.Net security question I ... I am writing an ASP.NET application that connects to SQL Server. ... Some clients will undoubtedly wish to have IIS ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: How to disable all this security?
    ... Disable ALL security? ... How about disable IIS and SQL Server altogether? ... It seems your ASP.NET cannot access Pub database on SQL server. ...
    (microsoft.public.vsnet.general)
Quantcast