Confusion in ASP.NET security

[Reza Alirezaei]

Is it possible to define an account in <Identity> in web.config which
dosen't exist in

domain???

The following line is in somebody's ASP.Net application:
I was viewing somebody's application I found the following line in his
web.config
<identity impersonate="true" userName="DOMAIN_NAME\ASP_NET_TESTER"
password="TEST"/>

but problem is that I didn't find user ASP_NET_TESTER on the domain and
application is working fine.
By the way ,,he has enabeld annonymous access to his web application using a
completely diferent account called "IUSR_DEV"


thanks for your help.

 

[Raterus]

I just tried this and it didn't work at all. Are you sure that user doesn't exist? Its not hidden down in some obscure OU is it? How did you try to find it? Try changing the username and password and see if the application works then!