30

Windows Server 2008 R2 Standard ( Microsoft Windows Server Version 6.1 Build 7601: Service Pack 1 )

IIS 7.5.7600.16385

In IIS Manager for a Site assigned an ApplicationPool with Identity = ApplicationPoolIdentity ( the default setting ) , how to determine the Windows account the site uses for directory operations ?

In previous versions of IIS, Application Pools run under the Network Service account.

What is default account for ApplicationPoolIdentity ?

IIS Manager > Server Instance > Application Pools > Application Pool > right-click Set Application Pool Defaults... --OR-- Advanced Settings

both invoke the same dialog which contains an Identity field with ... button that allows setting the Identity -- no where does it specify what account is associated with ApplicationPoolIdentity or allow that value to be set

BaltoStar
  • 8,165
  • 17
  • 59
  • 91

2 Answers2

49

The ApplicationPoolIdentity under IIS 7+ is a local machine account named the same name as the application pool itself and resides under a special domain called IIS AppPool. For example given the application pool name MyAppPool your application pool identity user would be IIS AppPool\MyAppPool.

You can learn more about how this works from this Microsoft link... http://www.iis.net/learn/manage/configuring-security/application-pool-identities

kinstephen
  • 721
  • 5
  • 8
  • Is this true on IIS 10? I am not seeing a user with the app pool name when trying to set permissions on the web root. – JohnFx Jan 23 '21 at 00:56
  • 3
    The user is hidden when you search while setting permissions for example. If you type in IIS AppPool\MyAppPool and click "Check Name" it will resolve to a valid local user. – kinstephen Feb 12 '21 at 03:37
  • in IIS 10 user would be IIS AppPool\ – Basyonic Oct 09 '22 at 11:56
4

For IIS 10 user would be:

IIS AppPool\<apppool name>
Basyonic
  • 447
  • 4
  • 9