Configuring a Worker Process Identity Using a Configurable Account (IIS 6.0)
You can configure a custom account to use as the worker process identity for an application pool.
Important
You must be a member of the Administrators group on the local computer to perform the following procedure or procedures. As a security best practice, log on to your computer by using an account that is not in the Administrators group, and then use the runas command to run IIS Manager as an administrator. At a command prompt, type runas /user:Administrative_AccountName "mmc %systemroot%\system32\inetsrv\iis.msc".
Procedures
To configure a worker process identity for an application pool using a configurable account
1. | In IIS Manager, expand the local computer, expand the Application Pools folder, right-click the application pool you want to configure, and then click Properties. |
2. | Click the Identity tab. |
3. | Click Configurable. |
4. | Click Browse, and under Enter the object name to select, type the account name in which you want your worker process to run, and then click OK. |
5. | In the Password box, type the password associated with this account. If there is no password associated with the account, leave the Password box blank. |
6. | Click OK. |
7. | Add the account you just created to the IIS_WPG group. For information about adding user accounts to groups, see "Add a Member to a Local Group" in Help and Support Center for Windows Server 2003. |
8. | If the account you just created must be able to start CGI processes, assign the following user rights to this account: Adjust memory quotas for a process and Replace a process level token. For information about configuring user rights for CGI applications, see Configuring CGI Applications. |
Related Information
| • | For information about application pools, see Configuring Application Pools in IIS 6.0. |
| • | For information about configuring NTFS permissions, see Best Practices for Securing Files with NTFS Permissions. |
