I've setup a website in IIS7 that gets its content from a fileshare using the UNC as the home directory, this site is running across 3 web servers. Now I would like the iusr anonymous account to have full control over this share. Should I create a domain account and change authentication to use that account on all the servers? What's the difference between application pool identity and specific user account? I would assume I would set it to use a specific user account with the one I created in the domain.


A general rule for all my web applications is to create a service account and have that application run under that service account. I would suggest you do the same for your situation.

Create the service account in the domain that you need. Then have your application impersonate as that account. Then if the account needs any permissions to folders, databases, etc., you can just give permissions to that account.

  • Do I change the service account under Authentication? Should i be concerned about not using the Application pool identity? – Rome Mar 12 '12 at 18:18
  • @Rome - What kind of application is it? ASP.NET 2.0, 4.0, other? You don't need to be concerned about not using the application pool identity unless you have configured something around that identity (e.g. database access or file system access). – Justin Helgerson Mar 12 '12 at 18:23

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.