It may not be a bug, but its hardly well documented. I'd vote to describe this as a documentation bug - I really shouldn't have to trawl through multiple online forums to find how to do such a basic operation (most of the descriptions I read were incomplete
or wrong). And this isn't the first time I've attempted to resolve it (first time I succeeded before giving up though). Thanks for the solution, it just saved me having to use "Network Service" again.
Before you made changes to the app pools, all you probably needed to do was add read access to your physical directory for the "network service" account (that is the default account used by asp.net on vista & win7). I think what you may be looking for at this
point is this: aspnet_regiis -ga The -ga switch tells aspnet_regiis to configure all the security for asp.net. Usually you only need to do this stuff when you are using impersonation in your application, but if you are changing the default user for the application
pools then you are effectivly doing the same thing IIS wide. The best complete documentation I've found is on MSDN. It applies to the previous version of IIS, IIS 6, but it is pretty easy to apply it in IIS 7 environments
I am trying to deny default application pool access to windows folder so users/scripts cannot run exe's I have denied IIS_IUSRS, which works for dedicated app pools. But not for default app pools. I have followed this thread, but there is no such user as ApplicationPoolIdentity
or IIS APPPOOL\DefaultAppPool, so I cannot deny it. I have ALL object types selected in the "select users and groups" dialog.
ok I managed to do it with icacls, no-one has actually shown the command here, so here it is. icacls c:\windows\system32\*.exe /deny "IIS APPPOOL/DefaultAppPool" Now if I check the permissions on any exe it shows "DefaultAppPool" is denied all access. However
cgi scripts are still able to run exe's, what have I missed ? IIS_IUSRS is also denied access What does ApplicationPoolIdentity run as ?
HCamper
8048 Posts
Re: Trouble with ApplicationPoolIdentity in IIS 7.5 + Windows 7
Sep 27, 2011 09:28 AM|LINK
Hi,
The Topic "Trouble with ApplicationPoolIdentity in IIS 7.5 + Windows 7"
Your questions are important and need the best possible answers.
Create a new post for the problems and issues.
TIA,
Regards,
Martin
Community Member Award 2011
Rob Grainger
1 Post
Re: Trouble with ApplicationPoolIdentity in IIS 7.5 + Windows 7
Apr 26, 2012 12:55 PM|LINK
Tasmey
69 Posts
Re: Trouble with ApplicationPoolIdentity in IIS 7.5 + Windows 7
May 21, 2012 07:00 AM|LINK
russmichaels
39 Posts
Re: Trouble with ApplicationPoolIdentity in IIS 7.5 + Windows 7
Sep 18, 2012 04:51 PM|LINK
russmichaels
39 Posts
Re: Trouble with ApplicationPoolIdentity in IIS 7.5 + Windows 7
Sep 18, 2012 05:04 PM|LINK