Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to have an internal website that automatically authenticates users based on their network credentials. However, I want to have the website display image files that are in a directory that most domain users do not have read access to. I have created a user that does have read access to the directory, and made the website run in an app pool with that user identity, but it appears that the file is being read as the domain user, since only users that have read access themselves can see the image on the website. Is there a way to force the image load to happen as the app pool user, without turning on anonymous authentication for the website (which would potentially allow non-domain users to access the site)?

share|improve this question

I ended up creating a handler that does the image loading, and just made the image source a path to that handler (with an encrypted query string specifying the actual file). That way the actual loading is happening as the app pool user.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.