IUSR vs. Application Pool credentials

Posted by jlew on Server Fault See other posts from Server Fault or by jlew
Published on 2010-02-25T18:12:45Z Indexed on 2010/04/22 1:03 UTC
Read the original article Hit count: 476

I have a IIS7/ASP.NET application running with the following configuration:

  1. Anonymous authentication (IUSR).
  2. Application Pool running as a domain account

If IUSR is denied the "logon locally", then it appears that ASPX pages will still render their HTML, but static content such as images will not be delivered. I'm wondering what the technical reason is for this? If IUSR is "broken", why will a request to an ASPX page be passed down the pipeline and executed, but IIS will refuse to serve an image in the same directory?

© Server Fault or respective owner

Related posts about iis7

Related posts about authentication