Date: 04/25/06 (Asp Dot Net)    Keywords: database, asp, security, web

I have a question for you all. I have an ASP.NET (VB.NET) application that access access 97 databases on a file server (don't laugh). In IIS, I have it set to use Windows Authentication, and anonymous access turned off. In my web config, I have impersonation turned on. My question is why do I have to specify a user that has specific rights to the file server? The clients using the application already have rights to this server. I don't want to have to specify a domain, user name, and password in my web config for various reasons (Specifically Security). Am I going about this the wrong way? Any help would be much appreciated.

Source: http://community.livejournal.com/aspdotnet/63948.html