Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've setup a website in IIS7 that gets its content from a fileshare using the UNC as the home directory, this site is running across 3 web servers. Now I would like the iusr anonymous account to have full control over this share. Should I create a domain account and change authentication to use that account on all the servers? What's the difference between application pool identity and specific user account? I would assume I would set it to use a specific user account with the one I created in the domain.

share|improve this question
up vote 2 down vote accepted

A general rule for all my web applications is to create a service account and have that application run under that service account. I would suggest you do the same for your situation.

Create the service account in the domain that you need. Then have your application impersonate as that account. Then if the account needs any permissions to folders, databases, etc., you can just give permissions to that account.

share|improve this answer
Do I change the service account under Authentication? Should i be concerned about not using the Application pool identity? – Rome Mar 12 '12 at 18:18
@Rome - What kind of application is it? ASP.NET 2.0, 4.0, other? You don't need to be concerned about not using the application pool identity unless you have configured something around that identity (e.g. database access or file system access). – Ek0nomik Mar 12 '12 at 18:23

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.