| Glen Scott 2005-07-22, 8:47 pm |
| Hi, I'm writing an ASP app that administers an ISA server remotely.
The fact that it's an ISA server isn't my problem I believe.
My question? What is the security difference between disabling
anonymous access and using account X from the web client, versus
allowing anonymous access but using account X as the account that runs
the application?
When I configure my web application to allow anonymous access, but
set the anonymous process to use account X, my ASP code works (the ASP
code can administer my ISA Server). When I disable anonymous access, and
I log into the web application using the same account X I mention above,
I get an error 80070005 when my ASP code tries to connect to my ISA
server to administer it.
I would think the above two options would be equivalent, but they're
not.
What is the difference?
Thanks,
Glen Scott
|