Refer
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/12a3d96c-65ea-4210-96ad-86a801f6a88c.mspx
if crystal report require the localsystem privileges, I'm afraid that you
need to set it to localsystem in order to make your CR works, the security
risks here is that if exploit can be done on the app pool, meaning it will
uses the localsystem account as the process identity.
Anyway, you can try to create this app pool just for crystal report, while
other portion using a normal app pool with network service account.
--
Regards,
Bernard Cheah
http://www.iis-resources.com/
http://www.iiswebcastseries.com/
http://msmvps.com/blogs/bernard/
œÐ°ÝŠbIIS 6.0 ·í€€ªºÀ³¥Îµ{Š¡¶°°ÏžÌÀYŠ³Ó¿ï¶µ "š€ÀÃѧO"
¥i¥H¿ïŸÜÀ³¥Îµ{Š¡¶°°ÏªºŠw¥þ±b€á
1.¥»Ÿ÷št²Î
2.¥»Ÿ÷ªA°È
3.ºôžôªA°È
1.œÐ°Ý³oŒË¬O§_ŒvÅTšìŠw¥þ©Ê 2.³o€TÓ±b€áªºŠw¥þ©ÊŠ³¬ÛÃö€å³¹¥i¥H°ÑŠÒ¶Ü ? ®Ñ€W³£šSŒg ÁÂÁÂ