Encrypted password and webconfig

I assume you run your asp.net app on a domain controller under the 'system' account ;)

the ASPNET user can't modify a file on disk.

Point taken ! Thanks !