连接方式和应用程序池标识之间的区别
在 IIS 7.5 中，应用程序的基本设置下有一个“连接为”选项。这是什么？为什么推出这个功能？它会覆盖应用程序池标识还是相反？
In IIS 7.5 there is a "Connect as" option under basic settings, for the application. What is this? Why was this feature introduced? Will it override the application pool identity or the other way around?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
此处提出了同样的问题并得到了解答。
一探究竟。
基本上：
这两个帐户是不同的东西。想想代表网站用户的网站身份。如果您创建新网站，则该帐户是匿名 IIS 帐户。如果禁用“匿名身份验证”，您的用户将必须针对网站进行身份验证（在 Intranet/Windows 域站点中，这可能使用网络凭据隐式进行）。
应用程序池标识是运行程序集所需的 Windows 帐户。通常它是“网络服务”帐户，它是具有有限用户权利和权限的最低特权帐户。它确实有网络凭据。这意味着您可以使用它对域中的网络资源进行身份验证。您还可以使用它来访问具有集成安全性的 SQL Server 数据库。
例如，如果您的 ASP.NET 应用程序必须写入文件夹，则必须向应用程序池帐户授予权限，而不是向网站帐户授予权限。
The same question was asked and answered here.
Check it out.
Basically:
The two accounts are different things. Think of the website identity representing the user of the site. If you create a new website this account is the anonymous IIS account. If you disable "Anonymous Authentication", your users will have to authenticate against the website (in a intranet/Windows domain site this could be implicite using the network credentials.)
The application pool identity is the Windows account needed for running your assemblies. Normally it is the "Network Service" account which is a least privileged account with limited user rights and permissions. It does have network credentials. This means that you can use it to authenticate against network resources in a domain. You can also use it to access a SQL Server database with integrated security.
For example, if your ASP.NET application has to write to a folder, you have to grant the permission to the application pool account, not to the website account.