Configuring Worker Process Identities
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1
In previous versions of IIS, the worker processes ran as the LocalSystem account. Because the LocalSystem account has access to almost all resources on the operating system, this had serious security implications. IIS 6.0 offers better security in that the worker process runs under the new built-in Network Service account by default. IIS 6.0 also allows you to configure which account worker processes run as. You have the option of using one of the three predefined accounts, or creating your own account.
This section includes the following information:
Configuring a Worker Process Identity Using a Predefined Account: Describes how to specify a predefined account as the worker process identity of an application pool.
Configuring a Worker Process Identity Using a Configurable Account: Describes how to create a new account as the worker process identity of an application pool.
Configuring Applications to Run Independently of Each Other: Describes how to isolate applications by configuring them in separate application pools that run with different worker process identities.