What are the Requirements for Application Pools and the IIS Worker Process Group?
This topic provides the steps that are required to create and configure application pools, and to assign the appropriate permissions to the Internet Information Services (IIS) worker process groups for users to have access to the Web applications.
The Web applications are created when you unpack a Commerce Server 2009 site. You must create application pools on the business management server for each Web service that you unpack, and you must create one application pool on each Web server for each Web site that it supports. Assigning permissions according to the steps provided supports a tight security implementation that limits access to Commerce Server 2009 data to only those Commerce Server 2009 components that need access to that data and only to the data they need.
Note
For each Commerce Server 2009 Web site that you unpack, we recommend that you create unique Web service account names and application pools. You can share application pools across Commerce Server 2009 Web sites, but we do not recommend it.
You must follow these steps in the order shown to assign the permissions to the IIS worker process groups.
Business Management Server
Follow these steps on the business management server in a deployment:
In IIS Manager, create an application pool for each Web service that you unpack for each site that you unpack. See How to Create Application Pools.
The following table summarizes the default names that this deployment guide uses for the Web services, application pools, and service accounts.
Web service
Application pool
Service account
CatalogWebService
CatalogWebSvcAppPool
<data domain>\CatalogWebSvc
MarketingWebService
MarketingWebSvcAppPool
<data domain>\MarketingWebSvc
OrdersWebService
OrdersWebSvcAppPool
<data domain>\OrdersWebSvc
ProfilesWebService
ProfilesWebSvcAppPool
<data domain>\ProfilesWebSvc
In IIS Manager, assign each Web service account to its associated application pool. For example, assign the CatalogWebSvc account to the CatalogWebAppPool. See How to Assign a Web Application to an Application Pool.
In Computer Management on Windows Server 2003 or Server Manager on Windows Server 2008, assign each Web service account to the IIS worker process group. See How to Add Service Accounts to the IIS_WPG Group when using Windows Server 2003 or How to Add Service Accounts to the IIS_IUSRS Group when using Windows Server 2008.
In IIS Manager, assign each Web service to its associated application pool. For example, assign the CatalogWebService application to the CatalogWebAppPool. See How to Specify Accounts for Running the Application Pools.
Web Server
Follow these steps on each production Web server in a deployment:
In IIS Manager, create an application pool for each Web site that you add to the Web server. See How to Create Application Pools.
The following table summarizes the default names that this deployment guide uses for the Web application, application pool, and service account assignments you must make for each Web site that you add to the production Web servers.
Web application
Application pool
Service account
<site_name>
<site_name>AppPool
<Web domain>\RunTimeUser
In IIS Manager, assign each Web site service account to its associated application pool. For example, assign the RunTimeUser account to the <site_name>AppPool. See How to Assign a Web Application to an Application Pool.
In Computer Management on Windows Server 2003 or Server Manager on Windows Server 2008, assign each Web service account to the IIS worker process group. See How to Add Service Accounts to the IIS_WPG Group when using Windows Server 2003 or How to Add Service Accounts to the IIS_IUSRS Group when using Windows Server 2008.
In IIS Manager, assign each Web site service account to its associated application pool. For example, assign the <site_name> application to the <site_name>AppPool. See How to Specify Accounts for Running the Application Pools.
See Also
Other Resources
What Are the Accounts and Groups to Create?