Re: application pool custom identity

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Tom Kaminski [MVP] ((A_at_T))
Date: 02/06/04 

Date: Fri, 6 Feb 2004 15:36:52 -0500

"William F. Robertson, Jr." <wfrobertson@kpmg.com> wrote in message
news:OHL6gnO7DHA.452@TK2MSFTNGP11.phx.gbl...
> I have a Windows 2003 Web Edition (IIS 6.0) server that host my intrAnet
> site. We are using only NT integrated authentication. When the AppPool
> identity is set to Network Service (default) everything works fine. But
we
> are trying to use the aspnet account so the web application will have
access
> to the directories on another machine. Currently we are using Virtual
> directories to link to the various docs on the file server. We would like
> to move away from virtual directories (too diffifult to maintain security
> 15,000+ user) and have the application determine what files they can and
can
> not see.
>
> When we change the identity of the AppPool to aspnet (setting the password
> and created a local user account on the file server with matching username
> and password) all the users are prompted with the NT login screen asking
for
> their username, password, and domain.
>
> My development group is not experiencing this problem, and I suspect it is
> because we are all administrators on the machine. All other users are
> prompted for the username and password. When they provide their domain
> username/password it gives them a 401.1 error invalid credentials. When I
> try to login with my username and password from their machine, it is
giving
> me the same 401.1 error.

That's interesting because 401.1 means that it was unable to authenticate
(bad username or password) and not that you were denied access (401.3).
Your credentials are accepted though if you try from your machine? 

-- 
Tom Kaminski IIS MVP
http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS
http://mvp.support.microsoft.com/
http://www.microsoft.com/windowsserver2003/community/centers/iis/

Relevant Pages

  • application pool custom identity
    ... I have a Windows 2003 Web Edition server that host my intrAnet ... directories to link to the various docs on the file server. ... When we change the identity of the AppPool to aspnet (setting the password ... their username, password, and domain. ...
    (microsoft.public.inetserver.iis)
  • Re: Authentication problems when not on local network
    ... What I want to do is be able to connect the laptop to other subnets at my ... laptop gets company DNS servers and "company.com" DNS via DHCP. ... When I try to connect to the file server via IP address (as the local name ... username and password. ...
    (microsoft.public.windows.server.networking)
  • TalkTalk Problem (was Re: FilecoreCk)
    ... that the only RISC OS browser able to initiate the setup was Firefox 1 ... Logon opens a window with File Server ... refer to the TalkTalk username and password there are two problems. ...
    (comp.sys.acorn.apps)
  • Re: Workgroup clients can access domain shares
    ... An open session from the NT machine to your file server with the shares ... with an account that has full access to them. ... A username and a password that match a username and the associated ... Saved credentials for access to the file server in Credential Manager. ...
    (microsoft.public.security)
  • Re: IE6 in XP SP2 could not work with integrated authentication and save password ?
    ... To check, open Control Panel -> User Accounts, click on Advanced, and click ... I've certainly had no problems with integrated authentication with SP2 since ... > a) authenticate integratedly and the username / password prompt pops up ...
    (microsoft.public.windowsxp.security_admin)