I can't seem to figure this out. I have a classic ASP application running on IIS 7.5 that makes calls to a remote database server. The application connection string settings are configured to use SSPI. I have configured an AppPool with a domain account that has access to the SQL database. The ASP application authentication settings in IIS are configured to use Windows Integrated.
User ---> IIS ---> SQL
In the past (at least what I think I remember) on IIS 6, the database calls from within the application would use the identity (the domain account) defined on the Application Pool. What I am seeing with IIS 7.5 is not the case. The only way I can get a domain account to make the calls to the SQL server is to use the "Connect As" function on the IIS app.
I am not wanting to pass the "users" credentials to the backend database server so this isn't a Kerberos issue. I specifically want IIS 7.5 to use the AppPool identity, which is a Domain Service Account, to be used to establish the database connection. Thanks in advance for your help.
↧
