Specify an ID for the application pool (IIS 7)

It is helpful to specify the identifier (IIS 7) 1 (total 1) for the application pool-evaluate this topic

Application to: Windows 7, Windows Server 2008, Windows Server 2008 R2, Windows Vista

The application pool ID is the name of the service account used by the worker that runs the application pool. By default, the application pool runs with a network service user account, which has low-level user permissions. You can configure the application pool to run as one of the built-in user accounts in the Windows Server 2008 operating system. For example, you can specify a local system user account, which has higher user permissions than the built-in user account of network service or local service. However, it is important to note that running the application pool with an account with high-level user permissions poses a serious security risk.

You can also configure a custom account to use as the ID of the application pool. Any user-defined account you select should have only the most basic permissions required by the application. Custom accounts are useful in the following situations:

• When you want to improve security and make it easier to track security events of the corresponding application.

• When you host websites of multiple customers on a single web server. If you use the same process account for multiple customers, the application source code of one customer may be able to access the application source code of another customer. In this case, you should also configure custom accounts for anonymous user accounts.
• When an application requires not only the default permissions of the application pool, but also other permissions. In this case, you can create an application pool and assign a custom ID to the new application pool.

Prerequisites

For information about the levels at which you can perform this process and the modules, handlers, and permissions required to perform this process, see application pool function requirements (IIS 7 ).

Exception in functional requirements

• None

Specify an ID for the application pool

You can run the following procedure: Use the user interface (UI), run the appcmd.exe command in the command line window, edit the configuration file directly, or write a WMI script.

UI

1. Open the IIS manager. For information about how to open IIS manager, see open IIS Manager (IIS 7 ).

2. In"Connection"In the pane, expand the server node, and then click"Application pool".

3. In"Application pool"Page, select the application pool for which you want to specify the identity, and then click"Operation"In the pane"Advanced Settings".

4. For"ID"Properties, click...Button to open"Application pool ID"Dialog box.

5. If you want to use a built-in account, select"Built-in account"Select an account from the list.

6. Select"Custom account"Option, and then click"Set"To open"Set creden"Dialog box. Then"User Name"Enter the custom account name in the text box"Password"Enter the password in the text box"Confirm Password"Retype the password in the text box, and then click"OK".

7. Click"OK"Close"Application pool ID"Dialog box.

Command Line

To specify the account ID to be used by the application pool, use the following syntax:

Appcmd set config/section: applicationpools/[name =' String ']. Processmodel. identitytype: specificuser|NetworkService|LocalService|LocalSystem

VariableStringThe name of the application pool to be configured. For exampleMarketingFrom network service to local service, enter the following command at the command prompt, and then press Enter:

Appcmd set config/section: applicationpools/[name = 'marketing ']. processmodel. identitytype: LocalService

To configure the application pool to use a custom ID, use the following syntax:

Appcmd set config/section: applicationpools/[name =' String ']. Processmodel. identitytype: specificuser | NetworkService | LocalService | LocalSystem/[name =' String']. Processmodel. Username: String/[Name =' String ']. Processmodel. Password: String

VariableName StringName of the application pool to be configured,Username StringThe username of the account that you want this application pool to use,Password StringIs the password of this account. For exampleMarketingApplication pool configuration to use a user nameMarketerThe password is m @ dr1d $ p.
In the command prompt, enter the following command, and then press Enter:

Appcmd set config/section: applicationpools/[name = 'marketing ']. processmodel. identitytype: specificuser/[name = 'marketing']. processmodel. username: marketer/[name = 'marketing ']. processmodel. password: m @ dr1d $ P

For more information about appcmd.exe, see appcmd.exe (IIS 7 ).

Configuration

The process in this topic affects the following configuration elements:

<Applicationpools>Lower<Add>Under<Processmodel>ElementIdentitytypeAttribute

For more information about IIS 7 configuration, see IIS 7.0: IIS setting architecture on msdn (which may be an English page ).

WMI

Use the following WMI classes, methods, or attributes to execute this process:

• Applicationpool. processmodel. identitytypeAttribute

For more information about WMI and IIS, see Windows Management Instrumentation (Wmi) in IIS 7 ). For more information about the classes, methods, or attributes associated with this process, see iis on the msdn website
WMI provider reference (may be an English page ).

See concepts

Manage application pools in IIS 7