Impersonation lets you switch between a signed on user and a default user account. The default user account is a normal Windows user account with a default ID of
mfuser, and a password of
mfuser. You can configure the account name and password.
Note: You must create the default user account if enabling default-user impersonation. It must be created by a local or domain administrator, depending on whether the system is part of a domain. The account must have sufficient permissions to log on to Windows interactively.
To reduce the privileges available to user-written code (and increase security), the default user account should have minimal privileges. For example, it can only be a member of the built-in Guests group.
Important: The default user account is configured in the
machine.config file, so it is relatively easy for users with access to a
nEnterprise Server for .NET system to retrieve the default username and password. Consequently, the default user account should not be an account with elevated privileges.
