用户 ASP.NET 运行在 [英] User ASP.NET runs under

问题描述

我有点困惑 ASP.NET 是如何运行的，它在什么用户下运行?在 iis 7.5 和 6.0 上

I'm a bit confused about how ASP.NET, what user it runs under? On iis 7.5 and on 6.0

一些我不清楚的用户帐户是

A few of the user accounts that I'm not clear on are

• 网络服务
• IUSR
• 应用程序池

我们将不胜感激任何关于不同用户的说明和安全考虑/等.

Any clarification on the different users would be appreciated and security considerations/etc.

推荐答案

总结:

• IIS 5.1 (Windows XP) - 这是一个本地 ASPNET 帐户
• IIS 6 - 默认情况下，应用程序池在 Network Service 帐户下运行，该帐户是 IIS_WPG 组的成员
• IIS 7.0 - 仍然是网络服务
• IIS 7 SP2/7.5 - 在一个名为 ApplicationPoolIdentity 的短暂事物下运行，它映射到一个帐户 IIS APPPOOLApplicationPool(例如 IIS APPPOOLDefaultAppPool).此帐户是 IIS_IUSRS 用户组的成员
• ASP.NET Web 开发服务器 (Cassini) - 这显然是您自己的帐户

• IIS 5.1 (Windows XP) - it's a local ASPNET account
• IIS 6 - by default, application pools run under the Network Service account which is a member of IIS_WPG group
• IIS 7.0 - still Network Service
• IIS 7 SP2 / 7.5 - runs under an ephemeral thing called ApplicationPoolIdentity which maps to an account IIS APPPOOLApplicationPool (e.g. IIS APPPOOLDefaultAppPool). This account is a member of IIS_IUSRS user group
• ASP.NET Web Development Server (Cassini) - it's obviously your own account

创建自定义低权限帐户来运行您的应用程序是一种很好的做法，尤其是在 PROD 环境中或当您需要从应用程序访问网络时.

And it's a good practice to create a custom low-privileged account to run your application especially on PROD environment or when you need to access the network from the application.

这篇关于用户 ASP.NET 运行在的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！