How to Run a Web Site as the User Who Created the Content

ID: Q184300

The information in this article applies to:

Microsoft Internet Information Server version 4.0

SUMMARY

Microsoft Internet Information Server (IIS) version 4.0 allows a Web site to run in the context of the user who created the content, as in some versions of UNIX, through the use of the anonymous user account.

MORE INFORMATION

When a user accesses any resource in IIS, IIS can perform the action as the user performing the request or in the context of a nominated user account. To access the resource as the user performing the request, you must use Basic or Windows NT Challenge/Response authentication. To access a resource as a pre-defined user, you can turn off all authentication, use Anonymous Authentication, and choose a pre-defined Windows NT account to use as the Anonymous account.

Assume you have a directory containing content created by DOMAIN\USER and you always want this content, whether it is active content (ASP, components) or static content, to run in the context of this user. Perform the following procedure to change the anonymous account for that directory:

Load the Microsoft Management Console administrator tool.

Right-click on the Web server, virtual directory, or directory in question.

Select Properties.

Select Directory Security.

Select Edit in the Anonymous Access and Authentication Control box.

Make sure only Allow Anonymous Access is selected.

Click Edit and type DOMAIN\USER or the user account to use.

Make sure Enable Automatic Password Synchronization is enabled.

Click OK to save the changes and exit each dialog box.

Any object executed within the scope of that virtual directory will now execute as DOMAIN\USER.

NOTE: The IIS log files can still log the IP address of the calling user.

Keywords :
Version : WINNT:4.0
Platform : winnt
Issue type : kbhowto