title: About SQL Server security
body: <p>I have an ASP.NET application which runs under the Classic .NET AppPool in IIS.</p>
  
  <p>I have a report to render from my website.</p>
  
  <p>The problem is SQL Server keeps telling me that it failed to create a connection to the datasource, because login failed for user IUSR.</p>
  
  <p>After adding that user directly to the databse I could get the report to work, but I'm concerned about security.</p>
  
  <p>By doing that, am I opening my specified databases to all websites hosted on IIS? Or is that account identity-specific?</p>