ASP.NET access a folder as ASPNET even though impersonation is set

Question

I have my ASP.NET web.config set with impersonation

<identity impersonate="true" userName="domainName\userName" password="userPassword" />

I'm running some a method like

IO.Directory.GetFiles(somePath)

And monitoring the file system access with Process Monitor
I keep getting all the access requests from the aspnet_wp.exe process to the folder, as the ASPNET user.
Why am I not seeing the access as the impersonated user?

Answer 1

My guess is you have anonymous access on ?

As a result it will use the system account... see

Disable anonymous access, and it will use the impersonation account.

Answer 2

@Nix's answer sounds like it might fit the ticket, but you should also check your authorizations in the .config file to make sure they're not conflicting with your impersonation in some way. Have a look at this question for a brief discussion on the subject of grant/deny, and the link in the accepted answer with more info.

http://stackoverflow.com/questions/831994/why-is-deny-users-included-in-the-following-example/832056#832056

BTW, I have not had conflicts with impersonations and leaving anonymous access on before, so ...