A basic security setup for running ASP.Net applcations

[Greg Smith]

I just moved some ASP.Net applications to a new machine. The applications
ran ok on the old machine but hit a number of security problems on the new
machine. Rather than just "kicking the door open" on the new machine, I
would like to get it setup correctly.



Is there a write-up somewhere that helps you implement good security
practices on you server that runs ASP.Net applications?



Any help is greatly appreciated.

[Tim Macaulay[MS]]

Hi

Check out this article and see if it helps:

815145 HOW TO: Lock Down an ASP.NET Web Application or Web Service
[url]http://support.microsoft.com/?id=815145[/url]

Cheers,
Tim Macaulay
Microsoft Corp.
This posting is provided "AS IS" with no warranties, and confers no rights

[Ken Cox [Microsoft MVP]]

Hi Greg,

This article includes details on what permissions the ASPNET account needs and
where:

[url]http://support.microsoft.com/default.aspx?scid=kb;en-us;811320[/url]

--

Important: Patch Windows *beyond* Blaster.
[url]http://www.microsoft.com/technet/security/bulletin/MS03-039.asp[/url]


"Greg Smith" <gjs@umn.edu> wrote in message
news:OsROBBRgDHA.1700@TK2MSFTNGP10.phx.gbl...
I just moved some ASP.Net applications to a new machine. The applications
ran ok on the old machine but hit a number of security problems on the new
machine. Rather than just "kicking the door open" on the new machine, I
would like to get it setup correctly.



Is there a write-up somewhere that helps you implement good security
practices on you server that runs ASP.Net applications?



Any help is greatly appreciated.