In IIS 6 on W2K3, all worker processes run by default using NetworkService as their identity.

In IIS 6 on W2K3, all worker processes run by default using NetworkService as their identity. This is done for security reasons since NetworkService is an account that has very few privileges.

If you want however, you can further isolate worker processes by assigning them each their own user account. If you make this change however, you need to make sure you do two things:

Assign the new account a complex password

Make the new account a member of the IIS_WPG built-in group.

The default IWAM_servername account is in fact a member of this group.

Article written by MyComputerAid.com

Related posts:

1. Changing Worker Process Identity in IIS 6
2. When Delegation Doesn’t Seem to Take
3. When Delegation Doesn’t Seem to Take
4. Using the TSKILL Command to End Processes
5. Preventing Users from Creating Local User Accounts
6. Process “Don’t Kill List”
7. Avoiding Legacy Built-in Groups
8. Using a Batch File for Resetting Domain Passwords
9. Using a Batch File for Resetting Domain Passwords
10. Avoid Overuse of Protected Groups