Hi

I have more questions about the authentication.

In windows 2008R2, DNN site is windows authentication. Which identify should I choose for the applicationpool? The default one, IUSR or Network Service? 

After open the site and signed in automatically with windows domain account. Why I cannot log out? Is there a url directlt point to a login page for host account?

Thanks

If use application pool identity, which user should be give the modify right to the DNN folder? Recently when I upgraded DNN site from 6.0.1 to 6.2.9, this caused a lot of upgrading errors. 

Another question about the DNN database user (in the connection string) rights, should I give this user the role membership for aspnet_Roles, aspnet_Profile the aspnet_Membership rights of BasicAccess, FullAccess and ReportingAccess. Is there any problem if the DB account without those roles rights when upgrading?

Thanks