Account used for file upload

[Bart]

Hi all,

I just created a new page to upload some files to a webserver.

I put it on my test server (IIS 6.0) and to my supprise I have to give "NT
AUTHORIY\NETWORK SERVICE" write access to save the uploaded files. It was
my understanding this kind of things ran under the "ASPNET" account of the
server?? I'm mistaken of is there a mis configartion of my server?

rgds,

Bart

 

[Peter Rilling]

IIS 6 has what are called Application Pools. All websites run within an
application pool. The default pool uses the NT AUTHORITY account. You can
see the app pools in the IIS manager and the properties dialog for the
website.

 

[Zodiac]

Thanks for that response Peter. What is the best practice in this matter?
Do I leave it this way or do I change it to ASPNET user?

rgds,

Bart

 

[Peter Rilling]

I usually just leave it unless there is some requirement to use some other
account. But that is really up to you.