Changing the user account for an application pool in IIS | Acctivate Help

 

iis 6 change application pool user

When you create an application pool in IIS you give it a name. You can then set the identity to ApplicationPoolIdentiy. Windows then creates this magic user you can't see. Say the app pool name is MyTestAppPool so you would end up with a user called MyTestAppPool (IIS AppPool\MyTestAppPool) When this happens Windows uses the servers current locale. May 30,  · Create the domain user, on the IIS server add the user to the Users and IIS_IUSRS group. Give the domain user permissions to the site's data. Go to the application pool for the site and change the Indentity user to the domain user. You can find this by selecting the app pool and clicking Advance Settings under the Actions pane menu. Select. Oct 08,  · Hence the importance of unchecking the 'User must change password at next logon' checkbox and checking the 'User password never expires' and 'User cannot change password' checkboxes. 4. Start the application pool. Access a site that is hosted on the application pool in question to start the IIS pool up after the changes have been applied.


Application Pool Identities | Microsoft Docs


There are several places on the MSDN where you can find part of the procedure, but I have decided to just give everyone a simple X step walkthrough on how you can get this done. Create a service account:. If you are doing this locally on the server, the easiest way to do so is to just right click on the My Computer icon on the Windows Start Menu:. Once inside the User Management snap-in, go ahead a select the Users icon from the hierarchical tree on the left side of the console to display all local users, and then right click in the right hand side pane and chose the 'New User' context menu item.

Fill in the New User dialog box with a username that is relevant to you. Make sure however that you uncheck the 'User must change password at next logon' checkbox and check the 'User password never expires' and 'User cannot change password' checkboxes. This will prevent the password from expiring and then disabling your application pool out of the blue one day, and will also keep application code from accidentally changing the service account user password.

Grant the service account the required privileges:. Now for the IIS related part. Up to now, the user account you have created is by default only part of the 'Users' group on the server.

This does not give the account sufficient privileges to run an IIS application pool, iis 6 change application pool user. To add the necessary privileges two steps are necessary:. It has special file system permissions to certain folders like the Temporary ASP. Hence making the service account part of this group will bypass the fact that you would have to grant the account special privileges to several paths in the file system explicitly. Since IIS application pools run in the non-interactive desktop, where most Windows services are found, we need to grant the service account we have selected for the task, the privilege to log on to this desktop as opposed to the interactive desktop that you and I are used to seeing.

Inside the Local Security Policy editor, select 'User Rights Assignment' from the hierarchy in the left pane, and the select the 'Log On as a Service' from the right pane.

Double click this item to reveal its properties. Once in the properties window, click the 'Add User or Group' button and then type in the name of your desired service account and confirm it.

Make sure you see the name amongst the list of accounts and groups present in iis 6 change application pool user list shown in the properties window. Setup the service account as an application pool identity:. The last task is iis 6 change application pool user setup the account to run the desired application pool in IIS.

To achieve this launch the IIS management console, and the right click on the name of the desired application pool in the hierarchy shown in the left pane, then select the 'Properties' item from the context menu. In the Properties window of the IIS Application pool, select the 'Identity Tab' and then enter the name and password of the service account. Once done, IIS will prompt you to re-enter iis 6 change application pool user password again.

The password is stored in encrypted format in the IIS metabase. Hence if the password for the account were to be changed, iis 6 change application pool user, the account password would become desynchronized from the one present in the IIS metabase, thus no longer allowing the pool to start.

Hence the importance of unchecking the 'User must change password at next logon' checkbox and checking the 'User password never expires' and 'User cannot change password' checkboxes. Start the application pool. Access a site that is hosted on the application pool in question to start the IIS pool up after the changes have been applied.

Open a Task manager window on the Windows server and look at the processes tab — if you can spot one or more if you are using web-gardens w3wp. Follow what I read via Linqto. These steps worked for me, except I had to stop the App Pool before changing the account. Every thing working fine locally on the web server box. If i try browsing the application from some other machineIt is asking for credentials.

I am also facing the same issue as Kumar. After following all steps above followed by rebootthe it still asks for credentials when accessing from another machine. Excellent article! But from few days, I had to work on a website configured on IIS 6 and ran into this issue. I followed this very useful article, iis 6 change application pool user, but running into a System. UnauthorizedAccessException error. More details on this StackOverflow post, since it is a bit long! Grant the service account the required privileges: Now for the IIS related part, iis 6 change application pool user.

Setup the service account as an application pool identity: The last task is to setup the account to run the desired application pool in IIS. Start the application pool Access a site that is hosted on the application pool in question to start the IIS iis 6 change application pool user up after the changes have been applied. Anonymous says:. September 10, at pm. Kumar says:. June 24, at am.

Chintan says:. September 19, iis 6 change application pool user, at am. Mahesh says:. February 6, at am. April 18, at pm. Web User says:. October 4, at pm. Follow Us.

 

 

iis 6 change application pool user

 

May 30,  · Create the domain user, on the IIS server add the user to the Users and IIS_IUSRS group. Give the domain user permissions to the site's data. Go to the application pool for the site and change the Indentity user to the domain user. You can find this by selecting the app pool and clicking Advance Settings under the Actions pane menu. Select. Jun 06,  · Creating and applying new application pool. Open Internet Information Service Manager. Expand the IIS server. Choose Application Pool.; On the right pane, click Add Application Pool or right-click the middle pane and choose Add Application Pool.; When the Add Application Pool window appears, type the name of the application pool on the Namefield (e.g. OSCE). When you create an application pool in IIS you give it a name. You can then set the identity to ApplicationPoolIdentiy. Windows then creates this magic user you can't see. Say the app pool name is MyTestAppPool so you would end up with a user called MyTestAppPool (IIS AppPool\MyTestAppPool) When this happens Windows uses the servers current locale.