Solved

Where's IIS's IWAM user in Windows 7?

Posted on 2010-09-22
3
2,670 Views
Last Modified: 2013-12-04
I've got a new Windows 7 machine and want to continue my mobile application development on it. I need to give rights to the folders used by my Web Service this application relies on, but IWAM isn't a valid user. My computer name is AMM-PC. Doing AMM-PC\IUSR is a valid user, but AMM-PC_IUSR isn't, and neither AMM-PC\IWAM nor AMM-PC_IWAM is a valid user. I've gone into Control Panel\Programs and Features\Add Remove Features\Internet Information Services\World Wide Web Services\Security, and bascially checked off all the options, hoping it would help. They are: Basic Authentication, Client Certificate Auth, Diggest Auth, IIS Client Certificate Mapping Auth, IP Security, Request Filtering (the only one originally checked by the system), URL Auth, Windows Auth.

The program's in Visual Studio 2008, and I installed that software, and then afterwards went into the above area and turned on IIS (it's off by default). I also turned on IIS6 compatibility mode.

It's my first forey into Windows 7 and I'm trying to move forward and not use the XP Mode Virtual Machine option because it's a step backwards (but I do miss it!)
Any thoughts?
0
Comment
Question by:andremara
  • 2
3 Comments
 
LVL 30

Accepted Solution

by:
Brad Howe earned 500 total points
ID: 33740572
Hi,
IWAM_MachineName was replaced by IUSR in iis 7 & 7.5.  These functions are handled by the default Application Pool account which is either NETWORK SERVICE or APPLICATIONPOOLIDENTITY.
While mostly everything in IIS7 / 7.5 is handled by NETWORK SERVICE and permissions are given to it or IUSR. The IUSR (Internet User) is any visitor to your website.
The IUSR account is similar to LOCALSERVICE in the manner in which it acts anonymously on the network.
The NETWORKSERVICE and LOCALSYSTEM accounts can act as the machine identity.
Take a read at this article.
Built-in User and Groups for IIS7
http://learn.iis.net/page.aspx/140/understanding-built-in-user-and-group-accounts-in-iis-7/
 Application Pool Identities
http://learn.iis.net/page.aspx/624/application-pool-identities/ 
Cheers, Hades666
0
 

Author Comment

by:andremara
ID: 33743035
Hades666,
Your information is very clean and concise. My question arises from lack of understanding user accounts in IIS7 and you have helped exactly with that issue, so I'm accepting your solution. Thanks. I will read up on the new user rights structures, and then give another go at running my web service. If past experience is any indication, I will be stumbling through some more errors until I can fully get my webservice that was running fine in XP, to run in Windows 7. In the meantime, if you happen to have any links that help shortcut that process I'd be grateful.

PS, given your underworld status, see what you can do to bring in some beautiful ocean swells. I wanna go body surfing again soon!

Andre
0
 

Author Closing Comment

by:andremara
ID: 33743040
Clearly articulated and only what was needed was said.
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

No security measures warrant 100% as a "silver bullet". The truth is we also cannot assume anything but a defensive and vigilance posture. Adopt no trust by default and reveal in assumption. Only assume anonymity or invisibility in the reverse. Safe…
If you are a web developer, you would be aware of the <iframe> tag in HTML. The <iframe> stands for inline frame and is used to embed another document within the current HTML document. The embedded document could be even another website.
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question