Impersonation lets you switch between a signed on user and a default user account. The default user account is a normal Windows
user account with a default ID of
mfuser, and a password of
mfuser. You can configure the account name and password.
Note: You must create the default user account if enabling default-user impersonation. It must be created by a local or domain administrator,
depending on whether the system is part of a domain. The account must have sufficient permissions to log on to Windows interactively.
To reduce the privileges available to user-written code (and increase security), the default user account should have minimal
privileges. For example, it can only be a member of the built-in Guests group.
Important: The default user account is configured in the
machine.config file, so it is relatively easy for users with access to anEnterprise Server for .NET system to retrieve the default username and password. Consequently, the default user account should not be an account with
elevated privileges.