Creating the ASPUSER User Account

  • Article

You must create a low-privilege domain account ASPUser to replace the default ASPNET account on the IIS Server. CCF uses the account to access the database server and execute LDAP queries for the Address Book functionality.

To create the ASPUser user account:

  1. Click Start, point to All Programs, then Administrative Tools, and click Active Directory Users and Computers.
  2. Expand the <CCFFQDN> node and select the Users object in the tree view.
  3. On the tool bar, click the Create new user icon (Single Person Icon Dd632734.3f535d01-0a6d-4a83-a55d-9cf39dde56c2(en-us,TechNet.10).png).
  4. Enter the first name and the logon name as ASPUSER then click Next.
  5. Enter the password and select the Password never expires check box. Ensure that you enter a password that meets the standard. You will be prompted for the choice. Click Next.
  6. Click Finish.

You must configure Service Principal Name (SPN) for ASPUSER on the IIS server. This is required since the Application Pool of CCF web services uses the ASPUser account as its identity instead of the default account. For more information on configuring SPN, see Setting the Service Principal Name for Kerberos Authentication.

See Also

Creating DemoAdmin and DemoAgent Accounts