Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I have an ASP.NET application which runs under the Classic .NET AppPool in IIS.
I have a report to render from my website.
The problem is SQL Server keeps telling me that it failed to create a connection to the datasource, because login failed for user IUSR.
After adding that user directly to the databse I could get the report to work, but I’m concerned about security.
By doing that, am I opening my specified databases to all websites hosted on IIS? Or is that account identity-specific?
A better way to so it would be to change the application pool identity to a specific user and add that user to the database, otherwise you are giving the standard IIS anonymous user access to the database.