Configuring a Worker Process Identity Using a Predefined Account

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1

You can configure a predefined account, such as Network Service, Local Service, or Local System, as the worker process identity for an application pool.

Important

You must be a member of the Administrators group on the local computer to perform the following procedure or procedures. As a security best practice, log on to your computer by using an account that is not in the Administrators group, and then use the runas command to run IIS Manager as an administrator. At a command prompt, type runas /user:Administrative_AccountName "mmc %systemroot%\system32\inetsrv\iis.msc".

Procedures

To configure a worker process identity for an application pool using a predefined account

1. In IIS Manager, expand the local computer, expand the Application Pools folder, right-click the application pool you want to configure, and then click Properties.

2. Click the Identity tab.

3. Click Predefined, and in the list box beside it, click Network Service, Local Service, or Local System.

   Note

   Network Service, Local Service and LocalSystem are members of the IIS_WPG group.

4. Click OK.

Related Information

• For information about adding user accounts to groups, see "Add a Member to a Local Group" in Help and Support Center for Windows Server 2003.

• For information about application pools, see Configuring Application Pools in IIS 6.0.

• For information about configuring NTFS permissions, see Best Practices for Securing Files with NTFS Permissions.