Reply to thread

Message: [QUOTE="Dave, post: 4270389"] Hi, I've read quite a few places where it recommends you use integrated security in your connection string. I tried this in test page to connect to the Northwind database by setting my connection string to: "data source=<mymachinename>;initial catalog=Northwind;integrated security=SSPI;" It worked as long as I added ASPNET, the account used for running ASP.NET Worker processes, as a SQL Server Login with access to Northwind. My question is should each web application on the server have it's own ASPNET-type account so it only has accesses the databases it needs? For example: ASPNET_Northwind (This account can only access the Northwind site and the Northwind database) ASPNET_Pubs ((This account can only access the Pubs site and the Pubs database) etc. If so, how do I do this? Thanks, Dave. [/QUOTE]