I have a website that is used for uploading data to a restricted database. Usually when I built out connection strings for SQL Server inserts, it was from an in house user so I could use windows authentication, what’s the best practice for when the user does not have access to the database?
Share
The best practice is to authorize your IIS APPpool where your website is running on… You can simply do this by creating a user in sqlserver…. FOr example IISApppool\Yourapppoolname. You can find the name of the pool where your site is running in the IIS manager.