Hello all,
I am trying to ascertain the difference, in terms of access and
privileges, between the Internet Guest User Account (IUSR_machinename,
where machinename is the name of your computer) vs. the ASPNET user
(ASP.NET machine account).
If you write a web application, you can configure it via its
web.config file. One of the things you can do is set the impersonate
attribute in the <identity> tag. If you set it (impersonate) to true,
and you additionally qualify the username and password attributes, the
visiting user can impersonate that specific account.
However, if you don't qualify username/password, but still set
impersonate = true, I understand that it defaults to impersonating
IUSR_machinename.
Finally, if you set impersonate=false, the user's scope defaults to
that of ASPNET.
The default settings on my machine are that IUSR_machinename is part
of the Guests group, and ASPNET is part of the Users group. But,
according to the description, these two groups have the same
privileges.
So then, what is the difference between setting the visiting user as
IUSR_machinename vs setting him/her as ASPNET ??
I have done a lot of reading on this, but the answer eludes me.
Any help appreciated.
regards,
Andrew J Fortune,
Melbourne,
Australia
