0

I have a site that is running under the root site's credentials instead of the one in its AppPool and cannot figure out why. This is not a problem on other servers.

Configuration:

  • Windows Server 2003
  • Site (test.domain.com) running in custom AppPool using a domain service account (domain\iis-user)
  • Application running under a separate AppPool with different credentials (domain\app-user)

When I browse to test.domain.com/app, WindowsIdentity.GetCurrent().Name shows domain\iis-user instead of domain\app-user.

I've checked that both user accounts are in the proper IIS security groups on the server and have tried setting SPNs. Changing the account for the AppPool to a known good account made no difference.

2 Answers 2

1

Perhaps write out the PID as well, and just check it's running in the App Pool you think it's running in.

Identity can be a secondary issue - for example, if Anonymous is enabled, the request may be impersonating the Anonymous user account, which may coincide with another ID.

Likewise, UNC credentials for a remote share might cause the credentials to be used with - for example - ASP.Net.

1
  • Good idea. We've verified the AppPool is what we expect and anonymous access is set to use the same service account as the AppPool. I will have to check on the path credentials later.
    – Mike Chale
    May 9, 2011 at 12:21
0

I suspect that you've got <identity impersonate="true" /> configured either in the site or root site web.config.

This could also be configured in machine.config file located in:

%SYSTEMROOT%\Microsoft.NET\Framework\v2.0.50727\CONFIG

1
  • The config files did not have impersonate tags. We tried adding it and it made no difference.
    – Mike Chale
    May 10, 2011 at 16:25

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .