|
Home > Archive > IIS Server Security > December 2005 > Using A user account other than LocalSystem on IIS
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Using A user account other than LocalSystem on IIS
|
|
| CSCCDT 2005-12-13, 5:58 pm |
| On a Win2003 server with SP1, we cannot run IIS 6.0 using an account other
than the Local System account. On a Win2000 server with SP4 we can run IIS
5.0 using an account other than LocalSystem, however of trying to access the
web pages we get 'A required privilege is not held by the client' error.
We've tried to change the Application Protection to LOW(IIS Process) and that
doesn't work.
What are we doing incorrectly? Can IIS 6.0 run using an account other than
System Account?
| |
| Ken Schaefer 2005-12-13, 8:50 pm |
| Hi
IIS6 has a different architecture to previous versions of IIS,if you are
using the native IIS6 Worker Process Isolation mode.
InetInfo.exe (which implements IISAdmin service) runs as LocalSystem -it is
not a supportable configuration running under any other account.
All user code is processed inside w3wp.exe processes, and the default
identify for those processes is Network Service rather than LocalSystem. You
can use your own custom accounts for these worker processes if you want.
Cheers
Ken
"CSCCDT" <CSCCDT@discussions.microsoft.com> wrote in message
news:F8A0916D-A472-4A9A-BF15-E9C01CFDAC07@microsoft.com...
: On a Win2003 server with SP1, we cannot run IIS 6.0 using an account other
: than the Local System account. On a Win2000 server with SP4 we can run IIS
: 5.0 using an account other than LocalSystem, however of trying to access
the
: web pages we get 'A required privilege is not held by the client' error.
: We've tried to change the Application Protection to LOW(IIS Process) and
that
: doesn't work.
:
: What are we doing incorrectly? Can IIS 6.0 run using an account other than
: System Account?
|
|
|
|
|