Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

My system is Windows Server 2008 R2 with IIS 7.5. I need to run a site which is allowed to do some administrative tasks. I have created an AD user account and added it to all the required groups. The site's application pool runs with custom identity set to this AD account. This works, however some tasks fail with 'Access is denied'. I have found that it was caused by UAC (with UAC disabled everything works ok).

So my question is - is it possible to run an application pool in elevated mode without globally disabling UAC? Possibly just disabling UAC just for this one account.

share|improve this question
add comment

2 Answers

UAC is per machine, not per user, so I don't think that is possible.

What type of task were you trying to perform? Perhaps you can explicitly grant the account permissions to certain objects instead.

share|improve this answer
add comment

Are you browsing the site from localhost?
I don't think UAC is affecting the application pool but I think your web site is impersonating your credentials, which UAC does affect. Try turning off impersonation for this site or page.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.