asp.net admin rights on windows 2003

[SJ]

I want asp.net to be able to write to files and restart windows services.
I know that making the username="SYSTEM" in machine.config gives asp.net
admin rights on a
computer in windows 2000.

This does not seem to be working in Windows2003 however.

Does anybody know a workaround? Or why this doesn't work and what can be
done instead to give asp.net admin rights to the computer?

Note: I know right clicking on a folder with give asp.net write permissions,
but i don't want to go that route.

Thanks,
-SJ

 

[Dominick Baier [DevelopMentor]]

On Windows 2003 you configure the worker process using IIS6 Application Pools.


be sure to have robust code and good input validation if your app is running
with that high privileges...

 

[SJ]

Thanks for the tips. The application pool identity was set to Network
Services. I changed it to Local system and everything works ok now.

I realise its important to have robust code since my app is running with
high priviledges. Its not an end user website. Only admins will have access
to it. I've taken the necessary steps to ensure there
are no holes in the application.

Thanks,
-SJ