I’m a bit confused about how ASP.NET, what user it runs under? On iis 7.5 and on 6.0
A few of the user accounts that I’m not clear on are
- Network Service
- IUSR
- AppPool
Any clarification on the different users would be appreciated and security considerations/etc.
In summary:
ASPNETaccountNetwork Serviceaccount which is a member ofIIS_WPGgroupNetwork ServiceApplicationPoolIdentitywhich maps to an accountIIS APPPOOL\ApplicationPool(e.g. IIS APPPOOL\DefaultAppPool). This account is a member ofIIS_IUSRSuser groupAnd it’s a good practice to create a custom low-privileged account to run your application especially on PROD environment or when you need to access the network from the application.