I'm a bit confused about how ASP.NET, what user it runs under? On iis 7.5 and on 6.0
A few of the user accounts that I'm not clear on are
Any clarification on the different users would be appreciated and security considerations/etc.
In summary:
ASPNET
accountNetwork Service
account which is a member of IIS_WPG
groupNetwork Service
ApplicationPoolIdentity
which maps to an account IIS APPPOOL\ApplicationPool
(e.g. IIS APPPOOL\DefaultAppPool). This account is a member of IIS_IUSRS
user groupAnd it's a good practice to create a custom low-privileged account to run your application especially on PROD environment or when you need to access the network from the application.