Re: Anonymous connection to a remote server

Glad to hear from you Roy,

I think it's OK since ASP will impersonate the authenticated user by
default( if allow anonymous then impersonate the anonymous user). And
using Integrated windows authentication at back end db is also what we
recommend.
BTW, is there any future action plan that you'll migrate your web
application from classic ASP to ASP.NET. The asp.net web app framework will
have more strong support for stable and high performance web application.
Also, as for security, the asp.net can let the asp.net running under the
process idenity (the application pool identity in IIS6) together with allow
anonymous in IIS. Thus, we can still keep the IIS's anonymous account as a
very restricted account.

Thanks,

Steven Cheng
Microsoft Online Support

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)

.

Relevant Pages

  • FileSystemObject problem in classic ASP
    ... i'm good at administrative .vbs and .hta, but very weak on .asp. ... the linked files do not have standard access ... authenticated user does have "modify"). ... file existance and get the DateLastModified info. your help would be ...
    (microsoft.public.scripting.vbscript)
  • Under which credentials COM makes calls from another process?
    ... ASP. ... Is it possible somehow to execute all the methods under specific ... Impersonate() and Revertwhich impersonate current ...
    (microsoft.public.windows.server.security)
  • Under which credentials COM makes calls from another process?
    ... ASP. ... Is it possible somehow to execute all the methods under specific ... Impersonate() and Revertwhich impersonate current ...
    (microsoft.public.platformsdk.security)
  • Under which credentials COM makes calls from another process?
    ... ASP. ... Is it possible somehow to execute all the methods under specific ... Impersonate() and Revertwhich impersonate current ...
    (microsoft.public.win2000.developer)
  • Re: The dreaded asp.clipboard
    ... can you impersonate to an authenticated user and see if this works? ... Alvin Bruney ... > as I can tell I've tried giving the adequate permissions - or am I missing ...
    (microsoft.public.dotnet.framework.aspnet)