Configuring a Worker Process Identity Using a Predefined Account
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1
You can configure a predefined account, such as Network Service, Local Service, or Local System, as the worker process identity for an application pool.
Important
You must be a member of the Administrators group on the local computer to perform the following procedure or procedures. As a security best practice, log on to your computer by using an account that is not in the Administrators group, and then use the runas command to run IIS Manager as an administrator. At a command prompt, type runas /user:Administrative_AccountName "mmc %systemroot%\system32\inetsrv\iis.msc".
Procedures
To configure a worker process identity for an application pool using a predefined account
In IIS Manager, expand the local computer, expand the Application Pools folder, right-click the application pool you want to configure, and then click Properties.
Click the Identity tab.
Click Predefined, and in the list box beside it, click Network Service, Local Service, or Local System.
Note
Network Service, Local Service and LocalSystem are members of the IIS_WPG group.
Click OK.
Related Information
For information about adding user accounts to groups, see "Add a Member to a Local Group" in Help and Support Center for Windows Server 2003.
For information about application pools, see Configuring Application Pools in IIS 6.0.
For information about configuring NTFS permissions, see Best Practices for Securing Files with NTFS Permissions.