Windows 2003 Identity issue.

[MikeH]

I have a small ASP.NET app that maintains a SQL Server
database. When I delpoy to a Windows 2003 Enterprize
Server I get the following error on connecting to the
RDBMS...

Login failed for user 'NT AUTHORITY\NETWORK SERVICE'

To overcome this problem I have modified the logins on
SQL Server as follows...

exec sp_grantlogin 'NT AUTHORITY\NETWORK SERVICE'
exec sp_grantdbaccess 'NT AUTHORITY\NETWORK SERVICE'

This works fine thus far but I am concerned as to whether
or not this is the "correct" way of doing things. In
particular, does it open up any security holes?

Thank you

 

[Michal A. Valasek]

| I have a small ASP.NET app that maintains a SQL Server
| database. When I delpoy to a Windows 2003 Enterprize
| Server I get the following error on connecting to the
| RDBMS...
|
| Login failed for user 'NT AUTHORITY\NETWORK SERVICE'

You can do two things:

1. Use SQL server, not Windows authentication.
2. Impersonate the web application to be running under specific user
account.