We need the ability to run a script to restart the app pool of the specific IIS 7 site (Windows 2008) from a Windows 10 machine.
We have a script, however, we need to use a service account to run the script.
We have tested the script with a domain admin account and this is successful (Right click and run as different user), however, we would like to avoid using a domain admin account for this.
We have tried the following: Grant the service account IIS_IUSRS permissions. Grant local admin permissions on the IIS server. Granted full permissions within the specific IIS site.
In short: We need to give a service account the lowest permissions in order to restart an IIS app pool remotely.