Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Can I run a site on my server under a user account that can't access any other sites or folders apart from its own and its children?

share|improve this question
up vote 1 down vote accepted

Yes certainly, you need to adjust the identity of the applicaiton pool that your site runs in.

Your best option would be to create an account that has the permissions you need, then create a new application pool based on an exisiting workin one. Then alter the identity of the pool to use the restricted account you created. The steps for doing this are as follows:

  • Open IIS Manager.
  • In the Connections pane, expand the server node and click Application Pools.
  • On the Application Pools page, select the application pool for which you want to specify an identity, and then click Advanced Settings in the Actions pane.
  • For the Identity property, click the ... button to open the Application Pool Identity dialog box.
  • If you want to use a custom identity, select the Custom account option and click Set to open the Set Credentials dialog box. Then type the custom account name in the User name text box, type a password in the Password text box, retype the password in the Confirm password text box, and then click OK.
  • Click OK to dismiss the Application Pool Identity dialog box.


share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.