A basic security setup for running ASP.Net applcations

[Greg Smith]

I just moved some ASP.Net applications to a new machine. The applications
ran ok on the old machine but hit a number of security problems on the new
machine. Rather than just "kicking the door open" on the new machine, I
would like to get it setup correctly.



Is there a write-up somewhere that helps you implement good security
practices on you server that runs ASP.Net applications?



Any help is greatly appreciated.

 

[Tim Macaulay[MS]]

Hi

Check out this article and see if it helps:

815145 HOW TO: Lock Down an ASP.NET Web Application or Web Service
http://support.microsoft.com/?id=815145

Cheers,
Tim Macaulay
Microsoft Corp.
This posting is provided "AS IS" with no warranties, and confers no rights

 

[Ken Cox [Microsoft MVP]]

Hi Greg,

This article includes details on what permissions the ASPNET account needs and
where:

http://support.microsoft.com/default.aspx?scid=kb;en-us;811320

--

Important: Patch Windows *beyond* Blaster.
http://www.microsoft.com/technet/security/bulletin/MS03-039.asp


I just moved some ASP.Net applications to a new machine. The applications
ran ok on the old machine but hit a number of security problems on the new
machine. Rather than just "kicking the door open" on the new machine, I
would like to get it setup correctly.



Is there a write-up somewhere that helps you implement good security
practices on you server that runs ASP.Net applications?



Any help is greatly appreciated.