Which one should I use for "anonymous user identity"? "specific user: IUSR" or "application pool identity"?
In IIS Manager center pane, there is an icon titled "Authentication" as follows:
Clicking the icon, we get 3 items as follows:
Right clicking the Anonymous Authentication and select edit, we have:
Question: which one should I use? What is the difference?
Solution
"The identity of an application pool is the name of the account under which the application pool's worker process runs. By default, application pools operate under the Network Service account, which has low-level user access rights."
A specific user is a user that you can set up yourself to specify which account your server will impersonate when users access your site. I would go with IUSR and give the account the necessary privileges.
app pool id
- Is Cognito explicit auth flow `ALLOW_USER_SRP_AUTH` included in `ALLOW_USER_AUTH`?
- Should I hash the password before sending it to the server side?
- Spring Boot - Two Authentication Methods for some paths
- Which one should I use for "anonymous user identity"? "specific user: IUSR" or "application pool identity"?
- NoReverseMatch at /login - error with LOGIN_URL or reverse function?
- No route matches [GET] "/users/sign_out"
- Python - View bot?
- In ASP.NET Core OIDC authentication, how can I set the cookie persistence based on custom data that was received from OIDC server?
- How to request API GET with Authentication (login)
- Accessing an asp.net api which uses AspNetCore.Authentication.OpenIdConnect from postman
- react native google sign in - firebase invalid token
- Laravel 5 authentication on home page
- How do I authenticate with HTTP Digest?
- Compulsory additional page after Register.cshtml
- NextJS authentication with separate backend (How to make subsequent http-requests to token-protected routes)
- It thinks that page only allows for Get, Head, so on posting, it gets an error: method not allowed
- What to use for "Sign in with Google" button's data-login_uri attribute?
- react render blank screen when redirect ( no Switch from react-router-dom )
- Oauth service for LDAP authentication
- Trying to link an existing Cognito user with a newly created Federated user with different emails
- Cannot login and get JWT Token using Haskell Network.HTTP.Simple
- CSRF Token necessary when using Stateless(= Sessionless) Authentication?
- Keystonejs 6 Authenticate from external frontend server with AuthenticateUserWithPassword mutation
- Git push results in "Authentication Failed"
- flutter_web_auth doesn't redirect from WebView to the app after authorizing the access to my data in Flutter
- Using LDAP (AD) for MySQL authentication
- Authorization (and security, in general) for web and mobile apps of the same service
- WebView2 - SSO, Recognize Login, or Persist Cookies/Identity
- Authentication for a company's intranet website in ASP.NET Core
- Trouble making Blazor server app to authenticate with Azure B2C