- A web server (Windows 2012 R2, IIS 8.5) outside of domain (called MY_WEB_SERVER)
- A virtual directory pointing to a NAS server on a domain (called MY_NAS_SERVER)
- An application set on virtual directory to give the virtual directory its own app in the app pool (called AccessNAS)
Problem: The credentials are rejected by the NAS server, most likely because the ones IIS sends are not the ones we want it to send.
I have configured the app in app pool with a custom identity (username: MY_NAS_SERVER\nas_account). This account exists on the NAS. However, the connection is refused. If I look at ProcMon, I see two ACCESS_DENIED notices on CreateFile, and they both were attempted not using my given custom identity, but "MY_WEB_SERVER\nas_account".
How do I prevent the substitution of "MY_NAS_SERVER" with "MY_WEB_SERVER", so that the credentials I provide are the ones used?
And can this be done without a web.config file on the NAS server?