All tasks performed under Windows require a valid Windows User account. Similarly, IIS (Internet Information Server) requires a valid User account to handle any requests it may receive.
When DiscountASP.NET sets up a hosting account, we assign each hosting account with a unique Username. You can access your website using that valid username (and your password) to transfer files via FTP, for example.
However, which user account is used when a website contains, for example, a web-based upload script that can be accessed by visitors?
The Anonymous ASPNet User
The Anonymous ASPNet User is the Windows User that is used by the .Net Framework to access web pages. This User account is often called the "Web Anonymous User" or "Internet Guest account". Anonymous requests are the most common type of requests handled by HTTP (web) servers. For example, Internet users browsing your web site. In this mode, the server knows nothing about the User, except for some general information like IP address and browser type. Since all tasks performed under Windows require a valid Windows User account, IIS requires a valid User account to use when handling these requests. For this type of Anonymous User, IIS uses the Anonymous ASPNet account.
To ensure maximum security in the DiscountASP.NET hosting environment, each web site account has its own Anonymous IUSR account to avoid cross-site script access.
In general, the IUSR does not require any disk space quota unless a file is created by a web application that is written in ASP, Perl, or PHP. For example, the web site uses:
- A File Upload Script
- A Web-based File Manager
If your web site uses one of the above type of scripts, you will need to adjust the disk space usage quota for the Anonymous ASPNet User to accommodate for file uploading/management. We provide a User Quota Manager tool in the control panel to make these disk quota assignments.