Very plainly, impersonation allows you to run the ASP.NET account as a privelaged account or as the Authenticated IIS user.
In your config file, if you set this attribute:
<identity impersonate="true" />
ASP will either run as the IUSR_MACHINENAME OR if a token is passed to IIS, it will run as the authenticated user.
However, you can also have ASP impersonate one specific user:
<identity impersonate="true" userName="domain\user" password="password" />
This allows asp.net to run with the permissions of the defined Domain User.
By default <identity impersonate="false" /> is set in your config file and asp will run as the accont that controls the worker process (as defined in your machine.config)
================================================== =========
Read this if you want to know how to get a correct reply for your question:
http://www.catb.org/~esr/faqs/smart-questions.html
^^Took that from planoie's profile^^
^^Modified text taken from gbianchi profile^^
================================================== =========
Technical Editor for:
Professional Search Engine Optimization with ASP.NET
http://www.wiley.com/WileyCDA/WileyT...470131470.html
================================================== =========
Why can't Programmers, program??
http://www.codinghorror.com/blog/archives/000781.html
================================================== =========
Impersonation
