Configuring a Worker Process Identity Using a Configurable Account

  • Article

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1

You can configure a custom account to use as the worker process identity for an application pool.

Important

You must be a member of the Administrators group on the local computer to perform the following procedure or procedures. As a security best practice, log on to your computer by using an account that is not in the Administrators group, and then use the runas command to run IIS Manager as an administrator. At a command prompt, type runas /user:Administrative_AccountName "mmc %systemroot%\system32\inetsrv\iis.msc".

Procedures

To configure a worker process identity for an application pool using a configurable account

  1. In IIS Manager, expand the local computer, expand the Application Pools folder, right-click the application pool you want to configure, and then click Properties.

  2. Click the Identity tab.

  3. Click Configurable.

  4. Click Browse, and under Enter the object name to select, type the account name in which you want your worker process to run, and then click OK.

  5. In the Password box, type the password associated with this account. If there is no password associated with the account, leave the Password box blank.

  6. Click OK.

  7. Add the account you just created to the IIS_WPG group. For information about adding user accounts to groups, see "Add a Member to a Local Group" in Help and Support Center for Windows Server 2003.

  8. If the account you just created must be able to start CGI processes, assign the following user rights to this account: Adjust memory quotas for a process and Replace a process level token. For information about configuring user rights for CGI applications, see Configuring CGI Applications.