finding the user of iis apppool \ defaultapppool

Posted by LosManos on Server Fault See other posts from Server Fault or by LosManos
Published on 2012-12-11T22:10:56Z Indexed on 2012/12/11 23:05 UTC
Read the original article Hit count: 440

Filed under:

user

|

sysinternals

|

process-monitor

My IIS apppool user is trying to create a folder but fails. How do I find out which User it is?
Let's say I don't know much about IIS7 but need to trace whatever is happening through tools.

Place of crime is WinSrv2008 with IIS7.

So I fire up Sysinternals/ProcessMonitor to find out what is happening.
I find Access denied on a folder just as I suspected. But which user? I add the User column to the output and it says IIS Apppool\Defaultapppool in capitals. Well... that isn't a user is it? If I go to IIS and its Apppools and Advanced settings and Process model and Identity I can see clues about which user it is but that is only because I know IIS. What if it had been Apache or LightHttpd or whatever? How do I see the user to give the appropriate rights to?

© Server Fault or respective owner

Related posts about user

blocking bad bots with robots.txt in 2012 [closed]

as seen on Pro Webmasters - Search for 'Pro Webmasters'
does it still work good? I have this: # Generated using http://solidshellsecurity.com services # Begin block Bad-Robots from robots.txt User-agent: asterias Disallow:/ User-agent: BackDoorBot/1.0 Disallow:/ User-agent: Black Hole Disallow:/ User-agent: BlowFish/1.0 Disallow:/ User-agent: BotALot Disallow:/ User-agent:… >>> More
Redirect network logs from syslog to another file

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I keep logging way to much info (not needed, for now) in my syslog, and not daily or hourly... but instant. If I want to watch for something in my syslog I just can't because the network log keeps interfering. So, how can I redirect network logs to another file and/or stop logging it? Dec 10 17:01:33… >>> More
polkit: disable all users except those in group wheel?

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
Is it possible to do the following using 1 polkit .pkla file? Disable all users except those in the wheel group from using polkit. The users in the wheel group will need to provide the root password when using polkit. /etc/polkit-1/localauthority/50-local.d/wheel-only.pkla [disable all users… >>> More
More efficent way to do this?

as seen on Stack Overflow - Search for 'Stack Overflow'
I have a if function that works out how much of a users profile is completed however the way I include below was the best I could think of, however it seems really inefficient. What is the better way to do this? if($user['first_name']!==""&&$user['last_name']!==""&&$user['pemail']… >>> More
PHP If/Else - More efficent way to do this?

as seen on Stack Overflow - Search for 'Stack Overflow'
I have a if function that works out how much of a users profile is completed however the way I include below was the best I could think of, however it seems really inefficient. What is the better way to do this? if($user['first_name']!==""&&$user['last_name']!==""&&$user['pemail']… >>> More

Related posts about sysinternals

Handle Sysinternals software does not accept -c parameter

as seen on Super User - Search for 'Super User'
I am trying to close a handle to a locked file in Windows, using Sysinternals Handle software (http://technet.microsoft.com/en-us/sysinternals/bb896655). First I search for opened handle: handle.exe "C:\Temp" It issues me the following: Far.exe pid: 1144 type: File 2E8: C:\Temp … >>> More
Alternative to Sysinternals 'handle' to enumerate open handles

as seen on Super User - Search for 'Super User'
I'm looking for a utility that does exactly what Sysinternals Handle does, but with easily parseable output, preferably CSV. Does anyone know of such a tool? It should be able to list all types of handles, not just file handles. Thanks! >>> More
Control Sysinternals Suite & NirSoft Utilities with a Single Interface

as seen on How to geek - Search for 'How to geek'
Sysinternals and NirSoft both provide helpful utilities for your Windows system but may not be very convenient to access. Using the Windows System Control Center you can easily access everything through a single UI front end. Setup The first thing to do is set up three new folders in Program Files… >>> More
Alternative to Sysinternals 'handle' to enumerate open handles

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm looking for a utility that does exactly what Sysinternals Handle does, but with easily parseable output, preferably CSV. Does anyone know of such a tool? It should be able to list all types of handles, not just file handles. Thanks! >>> More
What is "Virtual Size" in sysinternals process explorer

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi My application runs for few hours, There is no increase in any value ( vmsize, memory) of Task Manager. But after few hours i get out of memory errors. In sysinternals i see that "Virtual Size" is contineously increasing, and when it reach around 2 GB i start getting memory errors. So what kind… >>> More