About Products For Teams Log in Sign up

Home
What is "pass-through authentication" in IIS 7? [closed] Ask Question

Public Asked 12 years, 1 month ago Modified 9 years, 2 months ago Viewed 210k times
Questions

Tags The Overflow Blog

Closed. This question is off-topic . It is not currently accepting answers.
Users 82 How to land a job in climate tech
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Companies Closed 11 years ago .
Building golden paths for developers (Ep.
567)
Collectives
Improve this question Featured on Meta
Explore Collectives

Teams New blog post from our CEO Prashanth:

after specify the physical path for my website and click the "Test Settings" button, get the
In IIS 7, I I
Community is the future of AI
Stack Overflow for following warning: We are updating our Code of Conduct
Teams – Start and we would like your feedback
collaborating and
sharing The server is configured to use pass-through authentication with a built-in account to Temporary policy: ChatGPT is banned
organizational access the specified physical path. However, IIS Manager cannot verify whether the built-in
knowledge. Content Discovery initiative April 13
account has access. Make sure that the application pool identity has Read access to the update: Related questions using a...
physical path. If this server is joined to a domain, and the application pool identity is The [connect] tag is being burninated
NetworkService or LocalSystem, verify that <domain>\<computer_name>$ has read access to
the physical path. Then test these settings again. (UPDATED 5/5/23) - Changes to the
Census badge

Join Stack Overflow to find the bestSo answer

what istopass-through
your technicalauthentication?
question, help Literally, should be email
pass some A Sign
through
it
Sign up with up withsome B? So
Google Sign up with GitHub Sign up with Facebook
Create a free Team
others answer theirs. what are the A and B? Linked
Why Teams?

10 How to set up IIS 7 application pool

Also, am actually using the built-in ApplicationPoolIdentity Why can't IIS verify that this account has
I .
identity correctly?
proper access rights to the physical path? Why do need to verify it myself? I

2 Pass-Through Authentication - IIS Virtual

Directory
iis

Related
Share Improve this question Follow edited Feb 10, 2014 at 0:49 asked Mar 15, 2011 at 3:12 40 IIS7.5 under Win7 Prof. 64bit Returning
Benjamin Gruenbaum smwikipedia Blank Page (No HTML at all)
269k 87 500 501 60.9k 91 302 476 ASP.NET MVC on IIS 7.5 Error 403.14
340 -
Forbidden

96 "Cannot verify access to path (C:\inetpub

1 This was the first question that appeared in my search travels, but gained a better understanding pass- I
\wwwroot)", when adding a virtual
through authentication from stackoverflow.com/questions/15677156/… – Jonathan May 14, 2013 at 9:39 directory
1 At least don't delete the bugger. It has significance beyond "explain what a variable is" – Drew Oct 17, 2016 4 Local site within Dropbox using IIS
at 4:48
32 "IIS Manager cannot verify whether the
Add a comment built-in account has access"

1
IIS authentication error
1 Answer Sorted by:
3 Read access to the physical path
Normally, IIS would use the process identity (the user account it is running the worker process as) to 0 iis7.5 - simplest way of creating a virtual
access protected resources like file system or network. directory
68 Issues in IIS Manager
With passthrough authentication, IIS will attempt to use the actual identity of the user when 0

accessing protected resources.

Hot Network Questions
If the user is not authenticated, IIS will use the application pool identity instead. If pool identity is
there any merit in continuing to fight a trial
set to NetworkService or LocalSystem, the actual Windows account used is the computer account. is
despite an overwhelming chance of losing and
there being no plea deal?
The IIS warning you see is not an error, it's just a warning. The actual check will be performed at
Can buy my own C-Corp through
I a Roth SDIRA?
execution time, and if it fails, it'll show up in the log.
CiviCRM in a separate database keeps testing the
Drupal database on update
Share Improve this answer Follow answered Mar 15, 2011 at 3:49
23.04: how to add new folder to Nautilus window
Franci Penov using GUI
74.5k 18 129 167
How do write LaTeX code for matrices of this
I

form?
1 Iassume the user mentioned above is the user that is logged on in the website. Is this correct? Is pass-
more hot questions
through authentication a form of impersonation? – Ytrog Nov 8, 2013 at 7:42
4 @Ytrog yes, passthrough authentication can be considered as a form of impersonation. The IIS worker
process is impersonating the user. – Franci Penov Dec 5, 2013 at 21:59

1 "actual identity of the user" Which user? – Colonel Panic Jan 8, 2019 at 11:24
The Windows user the request was authenticated as. If Windows authentication is enabled on IIS, it will
attempt to authenticate the browser connection as a local machine user account or a domain account if the
IIS machine is connected to one. don't remember all the options it'll use, but think it'll attempt a
I I

certificate, and username/password at least. If the authentication of the request as a Windows user has
been successful, the worker process will be run under the identity of that Windows user, so that any files
and network access is properly ACLed against that Window user credentials. – Franci Penov Jan 8, 2019 at
19:22
I'm not able verify that If the user is not authenticated, IIS will use the application pool
identity instead when it comes to virtual directories using passthrough, don't think that's correct. I

– Kelly Elton Sep 29, 2020 at 23:03

Add a comment

Not the answer you're looking for? Browse other questions tagged iis or ask your own
question .

Stack Overflow Products Company Stack Exchange Network Blog Facebook Twitter LinkedIn Instagram

Questions Teams About Technology

Help Advertising Press Culture & recreation
Collectives Work Here Life & arts
Talent Legal Science
Privacy Policy Professional
Terms of Service Business
Contact Us
API
Cookie Settings
Data Site design / logo © 2023 Stack Exchange Inc; user
Cookie Policy contributions licensed under CC BY-SA rev 2023.5.5.43417 .