Share via


What are the Requirements for Application Pools and the IIS Worker Process Group?

This topic provides the steps that are required to create and configure application pools, and to assign the appropriate permissions to the Internet Information Services (IIS) worker process groups for users to have access to the Web applications.

The Web applications are created when you unpack a Commerce Server 2009 site. You must create application pools on the business management server for each Web service that you unpack, and you must create one application pool on each Web server for each Web site that it supports. Assigning permissions according to the steps provided supports a tight security implementation that limits access to Commerce Server 2009 data to only those Commerce Server 2009 components that need access to that data and only to the data they need.

Note

For each Commerce Server 2009 Web site that you unpack, we recommend that you create unique Web service account names and application pools. You can share application pools across Commerce Server 2009 Web sites, but we do not recommend it.

You must follow these steps in the order shown to assign the permissions to the IIS worker process groups.

Business Management Server

Follow these steps on the business management server in a deployment:

  1. In IIS Manager, create an application pool for each Web service that you unpack for each site that you unpack. See How to Create Application Pools.

    The following table summarizes the default names that this deployment guide uses for the Web services, application pools, and service accounts.

    Web service

    Application pool

    Service account

    CatalogWebService

    CatalogWebSvcAppPool

    <data domain>\CatalogWebSvc

    MarketingWebService

    MarketingWebSvcAppPool

    <data domain>\MarketingWebSvc

    OrdersWebService

    OrdersWebSvcAppPool

    <data domain>\OrdersWebSvc

    ProfilesWebService

    ProfilesWebSvcAppPool

    <data domain>\ProfilesWebSvc

  2. In IIS Manager, assign each Web service account to its associated application pool. For example, assign the CatalogWebSvc account to the CatalogWebAppPool. See How to Assign a Web Application to an Application Pool.

  3. In Computer Management on Windows Server 2003 or Server Manager on Windows Server 2008, assign each Web service account to the IIS worker process group. See How to Add Service Accounts to the IIS_WPG Group when using Windows Server 2003 or How to Add Service Accounts to the IIS_IUSRS Group when using Windows Server 2008.

  4. In IIS Manager, assign each Web service to its associated application pool. For example, assign the CatalogWebService application to the CatalogWebAppPool. See How to Specify Accounts for Running the Application Pools.

Web Server

Follow these steps on each production Web server in a deployment:

  1. In IIS Manager, create an application pool for each Web site that you add to the Web server. See How to Create Application Pools.

    The following table summarizes the default names that this deployment guide uses for the Web application, application pool, and service account assignments you must make for each Web site that you add to the production Web servers.

    Web application

    Application pool

    Service account

    <site_name>

    <site_name>AppPool

    <Web domain>\RunTimeUser

  2. In IIS Manager, assign each Web site service account to its associated application pool. For example, assign the RunTimeUser account to the <site_name>AppPool. See How to Assign a Web Application to an Application Pool.

  3. In Computer Management on Windows Server 2003 or Server Manager on Windows Server 2008, assign each Web service account to the IIS worker process group. See How to Add Service Accounts to the IIS_WPG Group when using Windows Server 2003 or How to Add Service Accounts to the IIS_IUSRS Group when using Windows Server 2008.

  4. In IIS Manager, assign each Web site service account to its associated application pool. For example, assign the <site_name> application to the <site_name>AppPool. See How to Specify Accounts for Running the Application Pools.

See Also

Other Resources

What Are the Accounts and Groups to Create?

Unpacking Sites and Resources

Configuring the Business Management Server

Configuring the Web Servers

Securing the Deployment

Working with Application Pools and Web Applications