Server.Execute 在 ASP 页面中使用什么帐户？
在我们 2003 年的服务器上，我们有一个使用标准 IUSR 匿名访问运行的网站。
该站点内部有几个虚拟目录，所有目录都指向本地 Web 服务器上的相同物理目录（这样，当我们升级所有客户时，我们只有一个代码库需要更新）。
在每个虚拟目录中，我们创建了另一个指向 DFS 网络共享的虚拟目录。当我们设置这些虚拟目录时，我们明确告诉它们以具有 DFS 共享所需的所有安全/权限的域用户身份进行连接。
但每次我们尝试加载网页时，我们对 DFS 共享上的文件执行的 Server.Execute 都会失败。
当我打开 DFS 目录的审核时，我看到两个失败审核，两者都表明是 IUSR 帐户尝试连接到 DFS 共享。
当我们明确告诉 vdir 以特定域用户身份连接时，为什么会发生这种情况？
Server.Execute 是否在与您告诉站点始终连接到远程目录的凭据不同的凭据下运行？
On our 2003 servers, we have a website running using the standard IUSR anonymous access.
Inside this site are several virtual directories, all pointing to the same physical directories on the local web servers (that way we only have one codebase to update when we upgrade all of our customers).
Inside each of these vdirs, we created another vdir that points to a DFS network share. When we set up these vdirs, we explicitly told them to Connect As a domain user that has all the required security/permissions for the DFS share.
But every time we try to load the web page, the Server.Execute we do on a file on the DFS share fails.
When I turn auditing on for the DFS directory, I see two failure audits, both of which say it was the IUSR account trying to make the connection to the DFS share.
Why is this happening when we explicitly told the vdir to Connect As a specific domain user?
Does Server.Execute run under different credentials than what you tell the site to always connect to the remote directory as?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
这仅适用于文件安全，并且不会更改 IIS 模拟的帐户。
默认情况下，默认应用程序池使用 NETWORK SERVICE 作为其安全帐户并模拟 IUSR_MACHINENAME。
确保 NT AUTHORITY\NETWORK SERVICE 具有对任何映射文件夹的完全控制权。
http://www.serverwatch.com/tutorials/article.php/10825_3595486_2/Migration-to-a-Load-Balanced-IIS-6-Environment.htm
This applies only to file security, and does not change the account which IIS impersonates.
By default the Default Application Pool uses NETWORK SERVICE as it's security account and impersonates IUSR_MACHINENAME.
Make sure NT AUTHORITY\NETWORK SERVICE has Full Control of any mapped folders.
http://www.serverwatch.com/tutorials/article.php/10825_3595486_2/Migrating-to-a-Load-Balanced-IIS-6-Environment.htm