Configuring ASP.NET to use Integrated Security

Below are the steps for configuring Integrated Security for a ASP.NET application. These instructions are for Windows 2003 systems, one running IIS and the other SQL Server 2005.

1. On the Web Server, Right Click My Computer and select Manage


2. On the Computer Management Window, expand the Local Users and Groups menu item


3. Right Click the Users folder and select New User


4. On the New User window, enter the information for the local account. (Remember to uncheck the “User must change password at next logon” checkbox). Click
   Create


5. Back on the Computer Management window, right click the local account and select
   Properties. On the Member of tab, click Add


6. On the Select Groups window, ensure that the From this Location field is the name of the Web Server then click the
   Advanced button


7. On the next window, click Find Now. Select the IIS_WPG group and then click
   OK. Click OK again to save the settings


8. Grant the newly created local account Modify access to the C:\WINDOWS\Temp folder


9. In IIS, expand the Application Pools menu. Either create a new application pool or right click an existing one. Select
   Properties and then the Identity tab


10. Select Configurable then Browse for the newly created account and enter the password twice for the account. Click
    Apply and then OK


11. On the Directory tab of the Properties for the Website, in the Application Pool field select it to run using the application pool identified with the local account


12. Repeat steps 1 through 4 to create a local account with the same User ID,Name, and Password on the SQL Server. This local account doesn’t need to a be a member of any groups


13. Open SQL Server Management Studio


14. Expand the Security menu for the server


15. Right Click the Logins folder and select New Login


16. Click the Search button and find the local account on the SQL server


17. Map that account to the required database


18. Grant the local account access to any tables or stored procedures