ASP.NET & Integrated Security setup?

D

Dave

Hi,

I've read quite a few places where it recommends you use
integrated security in your connection string.

I tried this in test page to connect to the Northwind
database by setting my connection string to:

"data source=<mymachinename>;initial
catalog=Northwind;integrated security=SSPI;"

It worked as long as I added ASPNET, the account used for
running ASP.NET Worker processes, as a SQL Server Login
with access to Northwind.

My question is should each web application on the server
have it's own ASPNET-type account so it only has accesses
the databases it needs?

For example:
ASPNET_Northwind (This account can only access the
Northwind site and the Northwind database)

ASPNET_Pubs ((This account can only access the Pubs site
and the Pubs database)

etc. If so, how do I do this?

Thanks, Dave.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Members online

Forum statistics

Threads
473,994
Messages
2,570,222
Members
46,810
Latest member
Kassie0918

Latest Threads

Top