Dave Burke - Freelance .NET Developer specializing in Online Communities

A freelance .NET Developer

To W2K3 : Application Pool Identity setting in IIS 6.0

I thought I was over the hump in setting up a website in W2K3 Server IIS 6.0, as several posts in a September 2003 “To W2K3” series timeframe will attest.  But that was on a W2K3 Server at HQ; today's W2K3 IIS 6.0 issue was on the first W2K3 Server of my home office network.

Configuration Objective:  Create an IIS Site with its own Application Pool with that Application Pool's Identity being set to a local user.  Not a problem...

Service Unavailable

I went into the Local User Policies and did what I did months ago at HQ: adding the account to the “Login as Service” and “Logon Local...” user policy groups.  Restarted IIS. Restarted the app pool. Rebooted.  nothin.

Then I found this most excellent TechNet article: Configuring Worker Process Identities.  How I got by without having to employ the steps listed in this article months ago when I configured several sites similarly on the HQ W2K3 servers is an unknown.  I'll have to investigate.

The specific steps which liberated me from the [worthless-and-why-can't-MS-give-a-clue-when-this-happens] “Service Unavailable” message were:

  1. Adding the user account to the IIS_WPG group of the server
  2. Assign to this account two user rights to start CGI processes: Adjust memory quotas for a process and Replace a process level token.
  3. Give the IIS_WPG group Read & Execute, List Folder Contents, and Read permissions to the Web site directories

Definitely an excellent TechNet article.  Whoever wrote it, thanks!

Comments

Julie Lerman said:

crap! I've been googling for an hour to solve a problem. Someone said "change the account for your application pool". I thought "whatever THAT means". So back to google and what do I find... This post!! Hooray.
Let's see if I can do this now. Same problem new win2k3 server and iis6 and can't access my database with the built in account. Aargh
# January 29, 2004 3:08 PM

Dave Burke said:

Funny, I just ran into this again tonight on a W2K3 server while setting up its first IIS site and application pool. Thanks for the reminder of this post, Julie! I used it to fix my own problem.
# January 29, 2004 8:52 PM

Alexandre Marinho said:

I´ve been trying for days to make infopath, sharepoint and web services work together in windows 2003. When I tried to access the web services from within infopath, even to define the secondary data sources, it came with the message "InfoPath cannot find or access the specified Web service description". Finnaly I found that the cause was that the Application Pool was set to MSSharePointAppPool and it must be set to DefaultAppPool. The problem is that The documentation that explains InfoPath and Sharepoint integration (Enhanced Status Report) says you must set the Application Pool to MSSharePointAppPool. I´ll see what I´ll do from now on, but at least InfoPath is finding the Web Services now.
# March 7, 2004 5:20 PM

tomcat said:

Dear ALL,

I have a problem that my IIS 6.0 still send message "SERVICE UNAVAILABLE" if my browser request any file on my site's folder.


Best Regards,
- brenk -
# March 15, 2004 1:13 AM

TomCat said:

Dear, I have the same problem with a Web SIte that receive more than 25gb data transfer daily.

I need some help with a configuration.
# June 30, 2004 4:20 AM

Dave Burke said:

TomCat Dear, did you go through the above 3 steps? I've done this a number of times since posting this note and things always kick in as they should. Regards!
# June 30, 2004 7:31 AM

Webmaster said:

We have a fresh IIS 6.0 installation using limited Network Service account. When we fresh the home page like 10 times (quickly) it activates the IIS restart process. We're using .NET and we make SQL queries to an SQL 2000 DB on each visit to the home page (to query for news stories)

Suggestions?
# August 2, 2004 4:19 PM

Dave Burke said:

Webmaster, Not related. Google on exact phrase "IIS restart." Good luck.
# August 2, 2004 4:27 PM

Faiz said:

I got the same error in IIS 6.0 on W2K3.I have reinstalled the IIS with only required services and started working.

# August 23, 2007 7:10 AM

zullu said:

Alexandre,

You said to change the AppPool from [MSSharePointAppPool] to [DefaultAppPool].

Can you please let me know, for which application in IIS do we need to modify this. Is it the SharePoint Portal or "Microsoft SharePoint Administration" or the "ShrePoint Central Administration"

Thanks,

# September 6, 2007 4:44 PM

zullu said:

Thanks Alexandre,

I figured out that my problem was resolved by providing the "Scripts and Executables" option in the [Execute Permissions] on the Home Directory Tab of the site Properties.

Hope this helps to someone in need.

Thanks.

Zullu

# September 12, 2007 11:36 AM

p0enix said:

that new link is useless

# March 5, 2008 5:36 PM

ARock said:

Thanks for the information.  The steps work like a charm.

# March 20, 2008 10:47 AM

makarchus said:

I tried doing above steps and no luck, I have Win2K server and IIS version 6.0.3790.1830, did above mentioned three steps but no luck.

Any further help is greatly appreciated.

# April 21, 2008 3:37 PM

makarchus said:

Above steps did solved my problem, in addition to the above steps I had to reboot my server

I think you need to restart IIS and application pools after these assignments to take effects.

Please try that... Thank you for good article and web site who offered this.

# April 26, 2008 9:34 AM

Partha said:

Hi Frns,

My deployment server has IIS 6.0 installed on it and its a windows 2003 server.

Can someone help me out with the below queries with regard to the above 3 steps:

1. Which user account you are referring here? Is it the "IWAM_<servername>" account or the "IUSR_<servername>" account?

2. Then how do I add the 2 user rights to that specific account?

I'm new to this IIS setup and configuration. please help me. Thanks in advance.

# August 18, 2008 12:15 PM

glpartha said:

Hi Frns,

I even unistalled and re-installed IIS 6.0.

Still I'm getting this "Service Unavailable"  error.

Please clarify my questions in the above comment...

Kindly help...

# August 21, 2008 1:47 PM

Hamburgler said:

which account is "the account"?

# October 29, 2008 6:27 PM

Neeraj Agrawal said:

Thanks man, your solution worked like a charm.

# January 15, 2009 8:31 AM

Christian said:

How can I do this under IIS 7.0?

# February 24, 2009 5:06 AM

Dave said:

Good post. Saved me lots of time. Thanks!

# July 8, 2009 4:21 PM

Baby said:

root cause: difference version of asp.net

action:

step 1. create application pool

             ex. framework 1.0, framework 2.0

step 2. change application pool of website

            from default to new pool

***group web site by framework

good luck

# July 31, 2009 5:53 AM

Pizza said:

The pungent combination of garlic and oregano signaled pizza as "foreign food," sure to upset native digestions.

Greek pizza, like Chicago-style pizza, is baked in a pan rather than directly on the bricks of the pizza oven.

# March 17, 2011 2:40 PM

DoS Lost "T" said:

You helped me a great deal with this post several years from your intial fix was posted!!!! Thanks!!!!

# July 15, 2011 6:46 PM