How can aspnet get login rights
in [Programming SQL]
|
From: Tony Johansson on 7 Jan 2010 10:11 If I do the following. Right click on My Computer and select Manage I get the dialog Computermanagement dialog with several items listed.One of these items is called local users and groups. This item local users and groups is split into two when expaning it. When expanding I get the two separate items called users and Groups. If I now click on item users I can see that user ASPNET does not belong to any group. I can also look through all the groups and see which uses is included in each. If I do so I can see that use ASPNET is not included in any group. I must say that from the beginning this user ASPNET was included in group User. Just for testing purpose I just removed this user ASPNET from the User group and I didn't notice any difference. That's why I ask this question. Have you any explanition ? //Tony "Uri Dimant" <urid(a)iscar.co.il> skrev i meddelandet news:eYVSD%234jKHA.340(a)TK2MSFTNGP02.phx.gbl... > Tony > ASPNET account belongs only to the Users group on that computer, that is > strange you do not see it > Are you sure that it is not there? > > > > > "Tony Johansson" <johansson.andersson(a)telia.com> wrote in message > news:xFj1n.14388$U5.222365(a)newsb.telia.net... >>I have IIS 5 >> >> Have you an answer to my question that I posted in the previous mail. >> >> //Tony >> >> "Uri Dimant" <urid(a)iscar.co.il> skrev i meddelandet >> news:Otp%23US4jKHA.3792(a)TK2MSFTNGP02.phx.gbl... >>> ASPNET account is only used by aspnet_wp.exe in IIS 5 (or IIS 5 >>> compatible mode for IIS 6). If you use IIS 6 and above where worker >>> process name is w3wp.exe, you can disable ASPNET even if you do ASP.NET >>> development. >>> >>> >>> http://weblogs.asp.net/mschwarz/archive/2003/03/31/4515.aspx >>> http://msdn.microsoft.com/en-us/library/ms178329.aspx >>> >>> >>> >>> >>> "Tony Johansson" <johansson.andersson(a)telia.com> wrote in message >>> news:jAi1n.14381$U5.222471(a)newsb.telia.net... >>>> Hello! >>>> >>>> I have a web site using ASP.NET that is using the famous Northwind >>>> database. >>>> If I use suser_sname in my program and use IIS wich is using account >>>> ASPNET I get >>>> hempc\aspnet. >>>> If I use suser_sname and run from within VisualStudio I get the >>>> hempc\Tony because that is >>>> the account that I use to login to the computer >>>> >>>> >>>> Setting in Windows >>>> *************** >>>> If I look at My Computer->Manage and select users I can see that I have >>>> a user names ASPNET >>>> that DOESN'T belong to any group such as Users or administrator. >>>> >>>> Settings in SQL Server express >>>> ************************ >>>> If I look at Security->Logins I have the following three accounts >>>> BUILTIN\Administrator >>>> BUILTIN\Users >>>> sa >>>> >>>> Now to my question. >>>> How can ASPNET log in to SQL Server when this user doesn't belong to >>>> any group. I double check in >>>> My Computer->Manage and select users. I absolutely sure that ASPNET >>>> account doesn't belong to any group. >>>> >>>> So can anybody explain how ASPNET get login rights to my SQL Server >>>> express 2005 ???? >>>> >>>> >>>> //Tony >>>> >>> >>> >> >> > >
From: Tony Johansson on 7 Jan 2010 10:15 So you mean that there is no one to one relationship betwnn BUILIN\Users and the users that exist in My computer->manage->Local user and groups ? //Tony "Erland Sommarskog" <esquel(a)sommarskog.se> skrev i meddelandet news:Xns9CF9925C67C00Yazorman(a)127.0.0.1... > Tony Johansson (johansson.andersson(a)telia.com) writes: >> I have a web site using ASP.NET that is using the famous Northwind >> database. If I use suser_sname in my program and use IIS wich is using >> account ASPNET I get hempc\aspnet. >>... >> Settings in SQL Server express >> ************************ >> If I look at Security->Logins I have the following three accounts >> BUILTIN\Administrator >> BUILTIN\Users >> sa >> >> Now to my question. >> How can ASPNET log in to SQL Server when this user doesn't belong to any >> group. > > BUILTIN\Users sounds to me like a group that includes all users on the > machine. Including ASPNET. > > -- > Erland Sommarskog, SQL Server MVP, esquel(a)sommarskog.se > > Books Online for SQL Server 2005 at > http://www.microsoft.com/technet/prodtechnol/sql/2005/downloads/books.mspx > Books Online for SQL Server 2000 at > http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx
From: Erland Sommarskog on 8 Jan 2010 18:05 Tony Johansson (johansson.andersson(a)telia.com) writes: > So you mean that there is no one to one relationship betwnn BUILIN\Users > and the users that exist in My computer->manage->Local user and groups ? Yup. If you would drop BUILTIN\Users and the grant access to HEMPC\Users, I expect that ASPNET would not able to connect. It is not very well documented in Books Online, but I assume that BUILTIN\Users mean "all users on the the local machine". -- Erland Sommarskog, SQL Server MVP, esquel(a)sommarskog.se Links for SQL Server Books Online: SQL 2008: http://msdn.microsoft.com/en-us/sqlserver/cc514207.aspx SQL 2005: http://msdn.microsoft.com/en-us/sqlserver/bb895970.aspx SQL 2000: http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx
From: Uri Dimant on 10 Jan 2010 03:45 Tony I think even removing that login from the users it 'preserve' the ability to connect to sql server, what if you drop the group users , can you still connect to? "Tony Johansson" <johansson.andersson(a)telia.com> wrote in message news:wQm1n.14412$U5.222453(a)newsb.telia.net... > If I do the following. > Right click on My Computer and select Manage I get the dialog > Computermanagement dialog with several items listed.One of these items is > called local users and groups. This item local users and groups is split > into two when expaning it. When expanding I get the two separate items > called users and Groups. > If I now click on item users I can see that user ASPNET does not belong to > any group. > I can also look through all the groups and see which uses is included in > each. > If I do so I can see that use ASPNET is not included in any group. > > I must say that from the beginning this user ASPNET was included in group > User. Just for testing purpose I just removed > this user ASPNET from the User group and I didn't notice any difference. > > That's why I ask this question. > > Have you any explanition ? > > //Tony > > > > "Uri Dimant" <urid(a)iscar.co.il> skrev i meddelandet > news:eYVSD%234jKHA.340(a)TK2MSFTNGP02.phx.gbl... >> Tony >> ASPNET account belongs only to the Users group on that computer, that is >> strange you do not see it >> Are you sure that it is not there? >> >> >> >> >> "Tony Johansson" <johansson.andersson(a)telia.com> wrote in message >> news:xFj1n.14388$U5.222365(a)newsb.telia.net... >>>I have IIS 5 >>> >>> Have you an answer to my question that I posted in the previous mail. >>> >>> //Tony >>> >>> "Uri Dimant" <urid(a)iscar.co.il> skrev i meddelandet >>> news:Otp%23US4jKHA.3792(a)TK2MSFTNGP02.phx.gbl... >>>> ASPNET account is only used by aspnet_wp.exe in IIS 5 (or IIS 5 >>>> compatible mode for IIS 6). If you use IIS 6 and above where worker >>>> process name is w3wp.exe, you can disable ASPNET even if you do ASP.NET >>>> development. >>>> >>>> >>>> http://weblogs.asp.net/mschwarz/archive/2003/03/31/4515.aspx >>>> http://msdn.microsoft.com/en-us/library/ms178329.aspx >>>> >>>> >>>> >>>> >>>> "Tony Johansson" <johansson.andersson(a)telia.com> wrote in message >>>> news:jAi1n.14381$U5.222471(a)newsb.telia.net... >>>>> Hello! >>>>> >>>>> I have a web site using ASP.NET that is using the famous Northwind >>>>> database. >>>>> If I use suser_sname in my program and use IIS wich is using account >>>>> ASPNET I get >>>>> hempc\aspnet. >>>>> If I use suser_sname and run from within VisualStudio I get the >>>>> hempc\Tony because that is >>>>> the account that I use to login to the computer >>>>> >>>>> >>>>> Setting in Windows >>>>> *************** >>>>> If I look at My Computer->Manage and select users I can see that I >>>>> have a user names ASPNET >>>>> that DOESN'T belong to any group such as Users or administrator. >>>>> >>>>> Settings in SQL Server express >>>>> ************************ >>>>> If I look at Security->Logins I have the following three accounts >>>>> BUILTIN\Administrator >>>>> BUILTIN\Users >>>>> sa >>>>> >>>>> Now to my question. >>>>> How can ASPNET log in to SQL Server when this user doesn't belong to >>>>> any group. I double check in >>>>> My Computer->Manage and select users. I absolutely sure that ASPNET >>>>> account doesn't belong to any group. >>>>> >>>>> So can anybody explain how ASPNET get login rights to my SQL Server >>>>> express 2005 ???? >>>>> >>>>> >>>>> //Tony >>>>> >>>> >>>> >>> >>> >> >> > >
First
|
Prev
|
Pages: 1 2 Prev: I have now probably done a very silly thing Next: Migrating/Promoting Schemata and Rows |