App Pool Identity - ApplicationPoolIdentity or NetworkService does it matter?

Hello all,

I have an important question in regard to security and my web app.   So I have a web app that I am using the Global.asax to encrypt via DPAPI the connectionStrings section of my web.config at the machine level.    I was getting an error could not access the web.config when deploying it to a server we have.   I also found other errors in the past where when i changed the identity from ApplicationPoolIdentity to NetworkService things were resolved permission wise.    Is there any drawback from doing this?   I want to make sure I have my ducks in a row if I need to explain why it's okay.
sbornstein2Asked:
Who is Participating?
 
achaldaveConnect With a Mentor Commented:
Did you check file permission on the folder where web.config file is located, IIS_IUSRS  local group should have read permission on the folder and web.config file.

Using network service as application pool identity can cause issues when you are trying to access resources from network using trusted connection option.
0
 
sbornstein2Author Commented:
thanks
0
All Courses

From novice to tech pro — start learning today.