Psst! Did you know DevelopmentNow is a mobile web site design agency?

Contact us for help mobilizing your site, or to sign up for our beta Mobile Web SDK!
all groups > iis security > march 2006 >

iis security : Delegation and IIS service account



T. Tyrone
3/16/2006 5:46:18 AM
Hello;

I'm trying to set up a web app that accesses a SQL database on a second
server. I want to use integrated security and have set the computer account
as trusted for delegation. I know I need to use setspn to tell Active
Directory that there is an authorized instance of a service of class
"MSSQLSvc" listening on port 1433 on computer FQDN running as service account
in my domain. My question deals with the IIS setup.

Does the World Wide Web Publishing Service need to be running under a domain
user account for this, or is having the web server trusted for delegation
enough?

Thanks;
T. Tyrone
3/17/2006 5:22:27 AM
Nevermind, figured it out...

[quoted text, click to view]
Ken Schaefer
3/23/2006 12:00:00 AM
FWIW: WWW Publishing Service is only supported when running as LocalSystem.
It is not supported using a domain account to run WWW Publishing Service.

Cheers
Ken

[quoted text, click to view]
: Nevermind, figured it out...
:
[quoted text, click to view]
:
: > Hello;
: >
: > I'm trying to set up a web app that accesses a SQL database on a second
: > server. I want to use integrated security and have set the computer
account
: > as trusted for delegation. I know I need to use setspn to tell Active
: > Directory that there is an authorized instance of a service of class
: > "MSSQLSvc" listening on port 1433 on computer FQDN running as service
account
: > in my domain. My question deals with the IIS setup.
: >
: > Does the World Wide Web Publishing Service need to be running under a
domain
: > user account for this, or is having the web server trusted for
delegation
: > enough?
: >
: > Thanks;
: > T.

AddThis Social Bookmark Button