IIS asks for login when changing Service Account of applic..

Hi there

I'd like to run my asp.net app under domain account using application
pool custom service account rather than impersonation (for easier
account credentials maintanace).

After setting up domain account, runnning aspnet_reg /ga, and adding
the account to the application pool, I get a logon screen when I hit
application's url in a browser. Everything is ok when it runs under
default Network Service account.

I didn't made any changes in domain controler (setspn and all the
kerberos stuff) which were mentioned sometimes in MS docs - is this a
reason? Is it necessary in every case, or are there setups in which I
could ommit this step? I'm not doing any explicit Kerberos auth, but I
guess it's possible that IIS itself may need it, right?

Hi,

a) Did you add the Domain account to the local IIS_WPG group on the IIS
server?

b) Does the Domain Account have appropriate NTFS permissions to the actual
files that make up your website?

Cheers
Ken


"H5N1" <ha5en1.TakeThisOut@gmail.com> wrote in message
news:1159530111.168032.173650@c28g2000cwb.googlegroups.com...
> Hi there
>
> I'd like to run my asp.net app under domain account using application
> pool custom service account rather than impersonation (for easier
> account credentials maintanace).
>
> After setting up domain account, runnning aspnet_reg /ga, and adding
> the account to the application pool, I get a logon screen when I hit
> application's url in a browser. Everything is ok when it runs under
> default Network Service account.
>
> I didn't made any changes in domain controler (setspn and all the
> kerberos stuff) which were mentioned sometimes in MS docs - is this a
> reason? Is it necessary in every case, or are there setups in which I
> could ommit this step? I'm not doing any explicit Kerberos auth, but I
> guess it's possible that IIS itself may need it, right?
>