My SQL server is on a different machine than my webserver. I need to allow the ASPNET user to touch the SQL server with minimal rights, only enough to run sp_setapprole.

I've tried changing the Machine.config file to be username="myDomain\myUserThatHasAccess" and setting the password in there, just to get it to work once, and I save the file, but it has no effect. Do I have to restart the webserver? the whole machine? Is there something I have to do to commit it?

Also, if windows authentication is optional on the website, how do I opt to sign in? if I run the website from my domain computer, why doesn't my requested webpage run with my permissions instead of ASPNET. Is it possible to change this so that guest users get ASPNET, but that those in the domain keep their identity on the website?

Thanks,

Jason