About the Default User Account

Impersonation lets you switch between a signed on user and a default user account. The default user account is a normal Windows user account with a default ID of mfuser, and a password of mfuser. You can configure the account name and password.

Note: You must create the default user account if enabling default-user impersonation. It must be created by a local or domain administrator, depending on whether the system is part of a domain. The account must have sufficient permissions to log on to Windows interactively.

To reduce the privileges available to user-written code (and increase security), the default user account should have minimal privileges. For example, it can only be a member of the built-in Guests group.

Important: The default user account is configured in the machine.config file, so it is relatively easy for users with access to anEnterprise Server for .NET system to retrieve the default username and password. Consequently, the default user account should not be an account with elevated privileges.