asp.net - 哪个用户运行我的 asp.net 用户？

Question

我一直读到您在 IIS 网站/虚拟目录中设置的用户是运行该应用程序的用户(匿名用户身份)

但是在应用程序池中，我也可以设置一个用户(进程模型，身份)

两者之间有什么区别，如果我读取文件，哪一个需要访问？

编辑:

赏金是针对这个问题的“但如果我使用“匿名身份验证”，我在“匿名用户身份”中选择的用户是否曾经使用过？ – ' 作为评论发布

Answer 1

结帐 this post .引用:

The two accounts are different things. Think of the website identity representing the user of the site. If you create a new website this account is the anonymous IIS account. If you disable "Anonymous Authentication", your users will have to authenticate against the website (in a intranet/Windows domain site this could be implicite using the network credentials.)

The application pool identity is the Windows account needed for running your assemblies. Normally it is the "Network Service" account which is a least privileged account with limited user rights and permissions. It does have network credentials. This means that you can use it to authenticate against network resources in a domain. You can also use it to access a SQL Server database with integrated security.

For example, if your ASP.NET application has to write to a folder, you have to grant the permission to the application pool account, not to the website account. For more information on application pool identities, read here.