Re: Howto refresh IIS 6 Application pool identity credential info

Ken,

Thx for the response, but stopping/starting the application pool doesn't help.
It seems that the domain account security is cached at startup of IIS, and
doesn't change until IISRESET is executed. After IISRESET, I see that the
logon time for the account has changed (using sysinternals tool). An
application pool restart doesn't change the credential info.

FYI,
the sysinternal tool shows that it has an authentication package of type
Kerberos and the logon type is Batch. So I think the solution could be found
in "renewing" the Kerberos ticket, but I have no idea how to do that.

IISRESET does the job so the code is somewhere in there :-(.

Kind regards,
Peter

"Ken Schaefer" wrote:

You should just be able to restart the web application pool in question.

Cheers
Ken


"Peke" <peke@xxxxxxxxxxxxx> wrote in message
news:53EA3347-C41F-42CE-964B-7EF6EA321BCA@xxxxxxxxxxxxxxxx
Hi,

We are having problems with the following situation.

If we change security settings for an application pool identity (something
like putting it in a security group (to have NTFS access on a folder,
accessible through a virtual directory in IIS)), the access is only
granted
after IISRESET. It's a domain account (I don(t know if this is
important.).
It seems like we have the following scenario :
On start of IIS, all application pool identities are given a logon
session.
I can see that using logonsessions.exe from sysinternals.
The logon session is only refreshed/renewed after IISRESET.
Is there a better , less impacting , way to get the specific logon
sesssion
renewed ?

Grtz,

Peter



.

Relevant Pages

  • IIS 6.0 and Permissions?
    ... It works fine on IIS ... I suspect it has to do with permissions. ... I have created a custom Application Pool which uses a Domain ... At this point I can't even logon to the site. ...
    (microsoft.public.inetserver.iis.security)
  • SSL OWA
    ... Just got OWA working (Application Pool in IIS wasn't installed properly). ... However I notice instead of logon using http://server/exchange I need to use ...
    (microsoft.public.exchange.connectivity)
  • Re: unable to run asp.net on 2000 server
    ... use this version of the .NET Framework. ... Viewing the Script Map for an ASP.NET Application ... Open the IIS management console, expand the local computer by clicking ... as long as they share the same pool designation. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Unable to create ASP.NET Project... VS Cant communicate with FrontPage
    ... use this version of the .NET Framework. ... Viewing the Script Map for an ASP.NET Application ... Open the IIS management console, expand the local computer by clicking ... as long as they share the same pool designation. ...
    (microsoft.public.vsnet.general)
  • Re: Unable to create ASP.NET Project... VS Cant communicate with FrontPage
    ... > use this version of the .NET Framework. ... it is often useful to view the script map for an ASP.NET ... Open the IIS management console, ... as long as they share the same pool designation. ...
    (microsoft.public.vsnet.general)