Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
To use Windows Authentication in our asp.net application, we need to check the Active Directory. To test, I normally use my own account, but that means that anyone can see my password on our buildserver.
Which account do I best use for this purpose? A restricted account in Active Directory?
If your are doing operations within the context of the user then you can impersonate his account. This is for operations like changing information or resetting the users password.
But for global transactions like searching, forgot password functions, joining to groups, etc. What I suggest is to create a restricted account to do only the functions you need and let your application pool use that. This password will be secure as it will not be on your web config.