Just as a quick note, everything mentioned here is correct and should be adopted as best practice, what I would add is that the ASPState database is used by IIS...