我写使用ActiveDirectoryMembershipProvider ASP.NET应用程序，类似的情况在这里列出： 的http://channel9.msdn.com/wiki/securitywiki/aspnet2formsauthtoadrolesinadintranet/

I am writing an ASP.NET application using ActiveDirectoryMembershipProvider, similar to the scenario outlined here: http://channel9.msdn.com/wiki/securitywiki/aspnet2formsauthtoadrolesinadintranet/

由于此设置的一部分，我配置ASP.NET成员如下：

As part of this setup, I configured ASP.NET Membership as follows:

	 <membership defaultProvider="MyADMembershipProvider">
	  <providers>
	    <add
	       name="MyADMembershipProvider"
	       type="System.Web.Security.ActiveDirectoryMembershipProvider, System.Web, Version=2.0.0.0, 
	             Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"
	       connectionStringName="ADConnectionString"
	       connectionUsername="testdomain\administrator" 
	       connectionPassword="password"/>
	    </providers>
	  </membership>

这工作，但在生产中我想用的，而不是管理员以最小的权限别的一个connectionUsername。什么是应该被分配到这个帐户的最低权限？

This works, but in production I would like to use a connectionUsername with minimum permissions to anything else, instead of "Administrator". What are the minimum permissions that should be assigned to this account?

推荐答案

请参阅的说明连接到Active Directory部分的 http://msdn.microsoft.com/en-us/library/ms998360.aspx 。

See the note in the "Connecting to Active Directory" section at http://msdn.microsoft.com/en-us/library/ms998360.aspx.