I have IIS on an Azure VM pointing to an Azure File Share for the website files/contents.

To allow IIS to access the File Share, I created an account on the VM with the same credentials as the File Share account, and then set the Connect As for that site to said user. To be clear the Connect As user has full read/write permissions.

Q: Will anonymous IIS site visitors inherit the Connect As user rights, thus leaving a rather large hole in my site security?

  • Why does the user being used by IIS have write permissions? – proteus Jan 29 '16 at 2:02
  • As best I can tell only Microsoft accounts can be added as rights managed users to Azure file share, and I don't believe you can add a Microsoft account as a user on Windows server. – Steve Jan 29 '16 at 11:37

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.