IIS App Pool Identity vs. Windows Account

windows sql-server-2008 iis-7 windows-authentication application-pool
Remotec picture Remotec · Jul 3, 2012 · Viewed 9.1k times · Source

What are the pro's and con's of using the built in App Pool Identity in IIS as opposed to specifying a Windows account?

For SQL Server if you want to connect from a .Net application using Windows Authentication I presume that if I use an App Pool Identity, I must associate this with a user in SQL Server or give that App Pool Identity access to by db?

Are App Pool Identities just added as convenience so that you dont have to set up accounts for your App Pools?

Answer

tsells picture tsells · Jul 3, 2012

The built in account used is specific to the computer. If applications inside the app pool need to connect to other resources on the network (database servers, file shares, etc) then using a (windows) domain account may be a better option. When you specify a domain account you must ensure they have the correct file permissions set on the physical folders that IIS is using. In later operating systems - you can add this account to the IIS_IUSRS group to achieve the default permissions.

Related questions

Access denied for enabled xp_cmdshell for the admin user

I'm using xp_cmdshell within a database trigger to launch a exe file. xp_cmdshell is enabled(it can execute simple cmd command like 'echo'). But when I try to launch the exe through xp_cmdshell, the access is denied. …

Read More
MSSQL2008 - Pyodbc - Previous SQL was not a query

I can't figure out what's wrong with the following code, The syntax IS ok (checked with SQL Management Studio), i have access as i should so that works too.. but for some reason as soon as i try to create …

Read More
Generate SQL server scripts from command line?

In Microsoft SQL Server Management Studio 2008 there is a "Generate scripts..." option under the Tasks menu. I'm just wondering if this tool is available from the command line somehow? It looks similar to the sqlpubwiz.exe command line tool that …

Read More