Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have an IIS server running a site, appPool is running under local system, this is done because its easier to have full permissions to certificates and other file based resources on the local server.

Problem is when I try write or copy a file to a network share, permissions are obviously not in place on the remote system for the IIS server local system.

Is it possible to grant permissions on the remote system to include read/write or even full access to the IIS servers local system account?

share|improve this question

The thing about the local system account is that it doesn't have network access - by design. You'll need to run it under an account that does have network access.

share|improve this answer
This is completely wrong. – JL. May 20 '10 at 16:43
@JL - No, it's not wrong. It's a deliberate design feature and has been that was since the account was first used in Windows. This is well known to all Windows admins and the information comes from Microsoft themselves. – John Gardeniers May 20 '10 at 21:33

if you have an Active Directory domain the easiest way is this:

  • create a user in domain
  • give this user administrative credentials on the IIS server machine
  • make the app pool run as this user
  • add necessary permissions on the share (and filesystem) so the webapp can write files on the network share
share|improve this answer
up vote 0 down vote accepted


share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.