Wednesday, August 29, 2007

Web service with its own identity

I created a webservice that needed a user with more rights than the network authority account which is the standard. It is rather easy to set up:
1. Open IIS
2. Go to Application Pool. Right click and choose 'new --> Application pool.
3. Right click the pool you created and choose properties
4. Click on the Identity Tab
5. Choose 'configurable user'
6. Choose the user (its important that the username includes the domain (domainName\username)
7. Enter and confirm the password
8. In Web sites right click on the directory of the application and choose properties
9. In the general tab click Create application button
10. In the application pool combo box, pick the application pool in step 2.

Sometimes it is enough to place the user in the IIS_WWG group and there should be no problem accessing the service.
IF there is a problem see that the user which is the identity of the application pool has the following user rights assignments in group policy: log on as service, log on as batch,
Replace a process level token, adjust memory quotas for a process, generate security audits (you may not need all of them).

The user will also need read/write access to Windows\Temp directory in the file system.

If you have not succeeded, you will most likely receive a "Service not available" error when trying to browse to the site.

0 Comments:

Post a Comment

<< Home