Results 1 to 3 of 3
  1. #1
    5 Star Lounger PaulB's Avatar
    Join Date
    May 2002
    Location
    Ottawa, Ontario
    Posts
    765
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Uninvited User (Win XPP SP1 +++)

    At some point in the past month, probably when I installed the MS .NET Framework V1.1 from Windows Update, I acquired a new user called "ASP.NET Machine A...", a password protected limited account. Do I need to keep this account? Should I change the password from its default? What is the default? In other words, is this a security concern?

    Thanks,
    Regards,
    PaulB

  2. #2
    Uranium Lounger
    Join Date
    Jan 2001
    Location
    Cincinnati, Ohio, USA
    Posts
    7,089
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Uninvited User (Win XPP SP1 +++)

    Paul, I think this is similar to the user the IIS installation creates. Since I don't use ASP.NET this is conjecture, but I believe it's a less-privileged account so that the ASP process doesn't run with the system's credentials and allow hackers access. There is an article from Microsoft entitled Configuring ASP.NET Process Identity that might help you determine what to do with it in your scenario.
    -Mark

  3. #3
    5 Star Lounger PaulB's Avatar
    Join Date
    May 2002
    Location
    Ottawa, Ontario
    Posts
    765
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Uninvited User (Win XPP SP1 +++)

    Thanks, Mark. I'll read the reference you provided to see if any further action is warranted.

    Cheers,
    Regards,
    PaulB

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •