IIS how to determine ApplicationPoolIdentity account?

BaltoStar picture BaltoStar · Jul 20, 2015 · Viewed 39.5k times · Source

Windows Server 2008 R2 Standard ( Microsoft Windows Server Version 6.1 Build 7601: Service Pack 1 )

IIS 7.5.7600.16385

In IIS Manager for a Site assigned an ApplicationPool with Identity = ApplicationPoolIdentity ( the default setting ) , how to determine the Windows account the site uses for directory operations ?

In previous versions of IIS, Application Pools run under the Network Service account.

What is default account for ApplicationPoolIdentity ?

IIS Manager > Server Instance > Application Pools > Application Pool > right-click Set Application Pool Defaults... --OR-- Advanced Settings

both invoke the same dialog which contains an Identity field with ... button that allows setting the Identity -- no where does it specify what account is associated with ApplicationPoolIdentity or allow that value to be set

Answer

kinstephen picture kinstephen · Jul 29, 2015

The ApplicationPoolIdentity under IIS 7+ is a local machine account named the same name as the application pool itself and resides under a special domain called IIS AppPool. For example given the application pool name MyAppPool your application pool identity user would be IIS AppPool\MyAppPool.

You can learn more about how this works from this Microsoft link... http://www.iis.net/learn/manage/configuring-security/application-pool-identities