Must the 'ASPNET' account in W2K and W2K3 be enabled (loginable) -and- have a non-expiring password to ensure ASP.NET functionality? As configured (enabled, non-expiring password), it is generating security compliance violations on number of our servers.
...
Go to the complete details ...