Re: Identify which users are running which asp pages
From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 06/27/04
- Next message: \: "Re: Simple question about IIS Applications and dllhost"
- Previous message: David Wang [Msft]: "Re: Can not save xls files opended from the IIS webserver"
- In reply to: jammer: "Identify which users are running which asp pages"
- Messages sorted by: [ date ] [ thread ]
Date: Sun, 27 Jun 2004 15:36:52 -0700
This can be figured out if you recursively search through the IIS metabase
on that machine looking for hard-coded user accounts for UNC-access,
Anonymous-Access, or AppPool Identity (any other form of hard-coded accounts
used on a request is outside of IIS, so it's your own custom stuff that you
need to figure out). In other words, if you see that a metabase node has
"AuthAnonymous" enabled, and AnonymousUserName is not a domain name, you
know that all anonymous requests to URLs underneath this node (unless
overridden at a lower node) use this user account for anonymous access.
Same thing goes for UNCUserName and WamUserName.
You cannot figure this stuff out through runtime inspection (i.e. it's not
possible for you to make a request and then have some programmatic way to
determine all the identities used for that specific request) -- there is no
such runtime API from IIS. This is why I recommend the static approach of
just searching through the IIS metabase, which is configuration data that
determines how IIS behaves.
-- //David IIS This posting is provided "AS IS" with no warranties, and confers no rights. // "jammer" <jolt_soda@hotmail.com> wrote in message news:d3f6b2a2.0406250612.cdb22db@posting.google.com... I need to programmatically identify which user account is being used to run which site and where within that site a user is running a specific portion of the asp code. I would like to avoid scanning the asp code if possible. This includes sites of varying security levels; therefore they may be running among an application pool. I have looked into what WMI and .Net provides for all types of user identification but I don't know where/how to look for users with iis 5. What is the best direction that I can head in: WMI/.Net Where: metatbase ? Any ideas or direction would valuable. Overall goal: Remove hard coded user accounts from a diverse network environment. Thanks a lot N8
- Next message: \: "Re: Simple question about IIS Applications and dllhost"
- Previous message: David Wang [Msft]: "Re: Can not save xls files opended from the IIS webserver"
- In reply to: jammer: "Identify which users are running which asp pages"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
