I have a web application/website running on IIS 7.5 and higher that I am trying to configure to use multiple application pools to segregate functions for security and performance purposes. The problem is when I create and use the second application pool the secondary function doesn't work. The rest of the site works fine, but as soon as I click a link that uses a resource in the secondary pool (link to ISAPI DLL that downloads a zip file) it gives a service unavailable message (404).
I have tried numerous configurations including giving full/admin permissions for App Pool Identity, Physical Path Credential, Windows file permissions, Windows Share permissions, etc (including using all of the same permissions for both application pools) with no change. The files are on the local server and not over a network (although in some case it will be run over a network). If I try the same configurations under a single Application Pool it works fine with multiple configurations, but as soon as I separate the main website function from the secondary function it breaks.
There seems to be something with separate Application Pools that overrides all other permissions to the resource. The strange thing is that I had this working on over 10 servers previously and it stopped working at some point and I don't know why. My guess is there was a Windows Update that "fixed" a security function that broke the config. I simply consolidated the application pools and it worked fine. Keeping this config in the future will be problematic as we move away from COMs and into something that is multi-threaded soon.
Any ideas or thoughts? I thought there might be some Application Pool Isolation security that I need to disable or something?
Thanks for the help.