Sign up ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have a site that is running under the root site's credentials instead of the one in its AppPool and cannot figure out why. This is not a problem on other servers.


  • Windows Server 2003
  • Site ( running in custom AppPool using a domain service account (domain\iis-user)
  • Application running under a separate AppPool with different credentials (domain\app-user)

When I browse to, WindowsIdentity.GetCurrent().Name shows domain\iis-user instead of domain\app-user.

I've checked that both user accounts are in the proper IIS security groups on the server and have tried setting SPNs. Changing the account for the AppPool to a known good account made no difference.

share|improve this question

2 Answers 2

Perhaps write out the PID as well, and just check it's running in the App Pool you think it's running in.

Identity can be a secondary issue - for example, if Anonymous is enabled, the request may be impersonating the Anonymous user account, which may coincide with another ID.

Likewise, UNC credentials for a remote share might cause the credentials to be used with - for example - ASP.Net.

share|improve this answer
Good idea. We've verified the AppPool is what we expect and anonymous access is set to use the same service account as the AppPool. I will have to check on the path credentials later. – Mike Chale May 9 '11 at 12:21

I suspect that you've got <identity impersonate="true" /> configured either in the site or root site web.config.

This could also be configured in machine.config file located in:


share|improve this answer
The config files did not have impersonate tags. We tried adding it and it made no difference. – Mike Chale May 10 '11 at 16:25

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.