title: DotNetNuke initial installation security best practice
body: <p>I've installed several DotNetNuke sites on Windows Server 2008. What I'd like to know is how the various security entities should be configured together. For example, some installation references recommend setting the site file's permission to include "NETWORK SECURITY" with Modification priviledges; IIS 7.5 AppPool Identity set to Network Service. </p>
  
  <p>As for the database - I'm using SqlServer 2008. I've used both Windows Integrated and SqlServer user identities. Is one more preferred than the other? I noticed in this forum that the AppPool identity needs db_owner priviledges in SqlServer.</p>
  
  <p>In short, I'm trying to tie together File Permissions, IIS 7.5 AppPool, and SqlServer 2008 security settings. I using DotNetNuke 5.x and 6.x.</p>