IIS Server Security - Security issue (ASP.NET-IIS)

Author

Security issue (ASP.NET-IIS)

Reza Alirezaei

2004-05-30, 11:52 am

Is it possible to define an account in <Identity> in web.config which
dosen't exist in

domain???

The following line is in somebody's ASP.Net application:
I was viewing somebody's application I found the following line in his
web.config
<identity impersonate="true" userName="DOMAIN_NAME\ASP_NET_TESTER"
password="TEST"/>

but problem is that I didn't find user ASP_NET_TESTER on the domain and
application is working fine.
By the way ,,he has enabeld annonymous access to his web application using a
completely diferent account called "IUSR_DEV"

thanks for your help.