<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://blogs.msdn.com/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>IIS, Security Templates, and Anonymous Authentication</title><link>http://blogs.msdn.com/b/david.wang/archive/2006/07/01/iis-security-templates-and-anonymous-authentication.aspx</link><description>Sigh... security is never black and white, is it? :-) 
 Question: 
 Environment: IIS6.0 Windows 2003 R2, Windows 2003 level domain. Everything standard. 
 1) The Microsoft security guide for IIS6.0 says that the IUSR account needs Log on Locally rights</description><dc:language>en-US</dc:language><generator>Telligent Evolution Platform Developer Build (Build: 5.6.50428.7875)</generator><item><title>re: IIS, Security Templates, and Anonymous Authentication</title><link>http://blogs.msdn.com/b/david.wang/archive/2006/07/01/iis-security-templates-and-anonymous-authentication.aspx#715424</link><pubDate>Thu, 24 Aug 2006 00:31:13 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:715424</guid><dc:creator>Edward</dc:creator><description>Hi David. I have some problem whith Asp Applications (Not Asp.net) that running on IIS6 machine and have to authenticate to SQL remote server whith trusted connection and not SQL connection. according to our security needs our application running whithout anonymous user and every user in the intrprise must authenticate to application. I defined Domain User on Application poll witch running this asp application ; but problem is that IIS doesn't understand this configuration and doesn't authenticate application to SQL by ussing Application poll user like in asp.net application when i use impersonation=true mode, and i get the next error:&lt;br&gt;login failed for user &amp;quot;nt authority\anonymous logon&amp;quot; &amp;nbsp;filename.ASP, LINE line_number.&lt;br&gt;&lt;br&gt;&lt;br&gt;THANK YOU&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=715424" width="1" height="1"&gt;</description></item><item><title>re: IIS, Security Templates, and Anonymous Authentication</title><link>http://blogs.msdn.com/b/david.wang/archive/2006/07/01/iis-security-templates-and-anonymous-authentication.aspx#715422</link><pubDate>Thu, 24 Aug 2006 00:30:03 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:715422</guid><dc:creator>Edward</dc:creator><description>Hi David. I have some problem whith Asp Applications (Not Asp.net) that running on IIS6 machine and have to authenticate to SQL remote server whith trusted connection and not SQL connection. according to our security needs our application running whithout anonymous user and every user in the intrprise must authenticate to application. I defined Domain User on Application poll witch running this asp application ; but problem is that IIS doesn't understand this configuration and doesn't authenticate application to SQL by ussing Application poll user like in asp.net application when i use impersonation=true mode, and i get the next error:&lt;br&gt;login failed for user &amp;quot;nt authority\anonymous logon&amp;quot; &amp;nbsp;filename.ASP, LINE line_number.&lt;br&gt;&lt;br&gt;&lt;br&gt;THANK YOU&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=715422" width="1" height="1"&gt;</description></item><item><title>re: IIS, Security Templates, and Anonymous Authentication</title><link>http://blogs.msdn.com/b/david.wang/archive/2006/07/01/iis-security-templates-and-anonymous-authentication.aspx#655930</link><pubDate>Tue, 04 Jul 2006 13:31:13 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:655930</guid><dc:creator>David.Wang</dc:creator><description>Phylyp - Thanks.&lt;br&gt;&lt;br&gt;It amazes me that despite having all information and interactions documented, nothing pulls it all into comparative context so that it makes useful sense.&lt;br&gt;&lt;br&gt;Unfortunately, this sort of synthesis is precisely where traditional documentation efforts fail, and it is one of the reasons why I blog... because I got tired of trying to get documentation writers to publish this sort of information on my behalf and WITHOUT their &amp;quot;technical edits&amp;quot; of my writing). And with a blog, I completely bypass that red-tape and directly publish the synthesized facts.&lt;br&gt;&lt;br&gt;//David&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=655930" width="1" height="1"&gt;</description></item><item><title>re: IIS, Security Templates, and Anonymous Authentication</title><link>http://blogs.msdn.com/b/david.wang/archive/2006/07/01/iis-security-templates-and-anonymous-authentication.aspx#655130</link><pubDate>Mon, 03 Jul 2006 12:06:44 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:655130</guid><dc:creator>Phylyp</dc:creator><description>Security may not be black and white, but thank you David, for explaining the above points in a black-and-white manner! That was very clear!!&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=655130" width="1" height="1"&gt;</description></item><item><title>Interesting Finds: July 2, 2006 AM edition</title><link>http://blogs.msdn.com/b/david.wang/archive/2006/07/01/iis-security-templates-and-anonymous-authentication.aspx#654513</link><pubDate>Sun, 02 Jul 2006 19:15:35 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:654513</guid><dc:creator>Jason Haley</dc:creator><description>&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=654513" width="1" height="1"&gt;</description></item></channel></rss>