ASP.NET Network Security

[Michael]

I have a network drive that I need to give my asp.net program access
to. I am not allowed to use the regulat aspnet user account. Is there
any way I can create a user account or use mine within the program to
gain access to this drive?

 

[Cowboy \(Gregory A. Beamer\)]

There are a couple of ways to handle this.

Easiest: Give ASP.NET rights. You cannot do this and it is not a wise idea
regardless, as it opens a security hole.

Easy, but a bit time consuming: Create a .NET assembly that uses Component
Services and place in COM+. You can then assign a user that the component
works under. This is simple as long as it does not depend on other
assemblies, as you may end up putting them in the GAC to make it work. If
assemblies, like your app, call on the COM+ assembly, you are fine.

Harder: Set up an identity for the thread that accesses the directory.

--
Gregory A. Beamer
MVP; MCP: +I, SE, SD, DBA

**********************************************************************
Think Outside the Box!
**********************************************************************

 

[Guest]

Use impersonation to run the application under a different use

http://msdn.microsoft.com/library/d...n-us/cpguide/html/cpconaspnetimpersonation.as

 

[Prodip Saha]

You are in the wrong newsgroup to start with. There is a group--
aspnet.security. Anyway look at this article and you should have everything
you need. I recently implemented Network access security architecture with
Mirrored Account. Be sure to check all the requirements.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/SecNetch08.asp

Prodip