ApplicationPoolIdentity vs NetworkService [Answered]RSS

• • Reply
  

  SathishBN

  1 Post

  ApplicationPoolIdentity vs NetworkService

  Dec 08, 2010 05:45 PM|SathishBN|LINK

  I'm having a strange issue with ApplicationPoolIdentity and NetworkService.

  My application autheicates with Active Directory. When I use ApplicationPoolIdentity with my app pool it fails with following error

  [DirectoryServicesCOMException (0x80072020): An operations error occurred.]
     System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail) +557
     System.DirectoryServices.DirectoryEntry.Bind() +44
     System.DirectoryServices.DirectoryEntry.get_AdsObject() +42
     System.DirectoryServices.PropertyValueCollection.PopulateList() +31
     System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName) +97
     System.DirectoryServices.PropertyCollection.get_Item(String propertyName) +172
     System.DirectoryServices.AccountManagement.PrincipalContext.DoLDAPDirectoryInitNoContainer() +498250
     System.DirectoryServices.AccountManagement.PrincipalContext.DoDomainInit() +51
     System.DirectoryServices.AccountManagement.PrincipalContext.Initialize() +122
     System.DirectoryServices.AccountManagement.PrincipalContext.get_QueryCtx() +42
     System.DirectoryServices.AccountManagement.Principal.FindByIdentityWithTypeHelper(PrincipalContext context, Type principalType, Nullable`1 identityType, String identityValue, DateTime refDate) +29
     System.DirectoryServices.AccountManagement.Principal.FindByIdentityWithType(PrincipalContext context, Type principalType, IdentityType identityType, String identityValue) +103
     System.DirectoryServices.AccountManagement.UserPrincipal.FindByIdentity(PrincipalContext context, IdentityType identityType, String identityValue) +48
     SR.Security.RoleProviders.AzManRoleTaskOperationProvider.GetUserSid(String username) +138
     SR.Security.RoleProviders.AzManRoleTaskOperationProvider.LoadRolesForUser(String username) +146
     SR.Security.RoleProviders.AzManRoleTaskOperationProvider.GetRolesForUser(String username) +215
     System.Web.Security.RolePrincipal.IsInRole(String role) +242
  
  When I chanage the identity to NetworkService it works fine without any error. 

  The same setup(With ApplicationPoolIdentity) is working on another version of the same application. This application was setup a month ago.

  It doesn't work only with the newly created Application Pool. Any one had similar issue?

  Thanks

  Sathish

  Application Pool Identity NetworService iis 7.5 IIS 7.5 application pool identities ApplicationPoolIdentity application pool

• • Reply
  

  Lloydz

  2336 Posts

  Microsoft

  Re: ApplicationPoolIdentity vs NetworkService

  Dec 13, 2010 09:35 AM|Lloydz|LINK

  Hi,

  When you use "ApplicationPoolIdentity" for your application pool identity, WAS create a virtual account with the name of the new application pool and run the Application Pool's worker processes under this account. You need to ACL your content based on this ApplicationPoolIdentity account (IIS APPPOOL\ApplicationPoolName) instead of the NT Authority\Network Service. For more information, please refer to:

  Understanding Built-In User and Group Accounts in IIS 7
  http://learn.iis.net/page.aspx/140/understanding-built-in-user-and-group-accounts-in-iis-7/

  Regards.