拥有管理员的ASPNET成员 [英] Having ASPNET member of Administrators

问题描述

是否有任何安全问题的ASPNET用户帐户成员

管理员？这是一个好习惯吗？

Are there any security issues having the ASPNET user account member of
Administrators ? Is it a good practice ?

推荐答案

如果您拥有服务器，并且您没有运行任何其他人的ASP.Net应用程序

用它，当然，它不会受伤。


-

HTH，

Kevin Spencer

Microsoft MVP

..Net开发人员

跟随者和贷方都不是。


" Jeff Robichaud" < JF ********* @ gmail.com>在消息中写道

新闻：好的************** @ TK2MSFTNGP12.phx.gbl ...

If you own the server, and you''re not running anyone else''s ASP.Net apps
with it, sure, it won''t hurt.

--
HTH,

Kevin Spencer
Microsoft MVP
..Net Developer
Neither a follower nor a lender be.

"Jeff Robichaud" <jf*********@gmail.com> wrote in message
news:Ok**************@TK2MSFTNGP12.phx.gbl...

是否有任何安全问题拥有
管理员的ASPNET用户帐户成员？这是一个好习惯吗？

Are there any security issues having the ASPNET user account member of
Administrators ? Is it a good practice ?

你好凯文，


这么多的原则是最小的特权...


杰夫：你觉得有什么问题，你认为这是必要的吗？


-

Matt Berther
http://www.mattberther.com

Hello Kevin,

So much for the principle of least privilege...

Jeff: What problems are you encountering that you feel that this is necessary?

--
Matt Berther
http://www.mattberther.com

如果你拥有服务器，并且你没有运行任何其他人的ASP.Net
应用程序，当然，它不会受到伤害。<凯文斯宾塞
微软MVP
.Net开发人员
跟随者和贷款人都不是。
Jeff Robichaud < JF ********* @ gmail.com>在消息中写道
新闻：好的************** @ TK2MSFTNGP12.phx.gbl ...

If you own the server, and you''re not running anyone else''s ASP.Net
apps with it, sure, it won''t hurt.

Kevin Spencer
Microsoft MVP
.Net Developer
Neither a follower nor a lender be.
"Jeff Robichaud" <jf*********@gmail.com> wrote in message
news:Ok**************@TK2MSFTNGP12.phx.gbl...

是否有任何安全问题拥有ASPNET用户帐户成员管理员？这是一个好习惯吗？

Are there any security issues having the ASPNET user account member
of Administrators ? Is it a good practice ?

" Jeff Robichaud" < JF ********* @ gmail.com>在消息中写道

新闻：好的************** @ TK2MSFTNGP12.phx.gbl ...

"Jeff Robichaud" <jf*********@gmail.com> wrote in message
news:Ok**************@TK2MSFTNGP12.phx.gbl...

是否有任何安全问题拥有
管理员的ASPNET用户帐户成员？这是一个好习惯吗？

Are there any security issues having the ASPNET user account member of
Administrators ? Is it a good practice ?

ASPNet帐户是一个默认帐户，类似于匿名帐户，

IIS-5在配置特定网站时使用作为匿名。

默认状态是非常最小特权。使用管理员会员资格，它太高了，风险很高。我会将管理员权限从ASPNET中移除。


John

ASPNet account is a default account, similar to Anonymous account, that
IIS-5 uses when a particular web site is configured as "anonymous". The
default state is very "least privilege". With Admin membership, it is too
high and risky. I would take Admin privilege away from ASPNET.

John

这篇关于拥有管理员的ASPNET成员的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！