asked on

IISAPPPOOL configured but still accessing using IUSR

I am about to start migrating sites from one Windows 2008R2 to another and hit an issue. I have a new site and new Application Pool configured both identical (imported) from the old server. The Application pool is configured to use Application Pool Identity and have given the relevant area NTFS permissions for this user (IIS AppPool\name) user but I am getting access denied. When I use Procmon I see that the site is trying to use IUSR instead. I have checked and rechecked the obvious, created a brand new site etc and still get the same error. I could give IUSR permission, but would prefer all sites to run under their own user accounts.

Any ideas?

Emmanuel Adebayo

On the Application content folder, ensure that the you check the NTFS permission for IIS AppPool\name to propagate down to the child object

http://technet.microsoft.com/en-us/library/dd163542.aspx

Regards

StuartBowen

ASKER

iis apppool\sitename has full permissions at the moment to the folder, all sub folders and all files in the site. Also when I look at Procmon, it is definitely trying to use IUSR user and not the App Pool user.

ASKER CERTIFIED SOLUTION

Emmanuel Adebayo

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

StuartBowen

ASKER

I have also created a brand new site (not an import) and used the defaultapppool on this and get the same error. It is trying to use IUSR despite the identity being set to apppoolidentity.

StuartBowen

ASKER

Ahhhhh. As well as configuring Apppoolidentity there I needed to set the Authentication in the site to use ApplicationPoolIdentity.

I might actually make progress today.

Thanks, it is working now.