Changing the identity for a SharePoint 2010 Application Pool

There might be a situation where you want to alter the identity for the IIS application pool under which your SharePoint 2010 web applications are running.

You might be tempted to navigate to the IIS settings and alter the identity in there:

This is not recommended.

It’s best practice to run application pools under a domain user account, i.e. SP_ServiceApps. This account is best managed using Managed Accounts.

To change the identity for an application pool, log into Central Administration and follow these steps:

  1. Go to Security and under General Security, click Configure Service Accounts.
  2. Select the application pool from the components drop-down listbox (1)
  3. Select the managed account (2) that you want to use as
    the identity for this application pool, or register a new managed
    account in SharePoint 2010, using the Register a new managed account link.
  4. Click the OK button.
  5. You’ll be warned that this action requires an IIS reset on all servers, click OK.
  6. Perform a iisreset /noforce on all WFE servers in the farm.

2 thoughts on “Changing the identity for a SharePoint 2010 Application Pool

  1. After trying everything, including AD and SP password resets, reconfiguring the whole SharePoint infrastructure (apart from the pesky UserProFileSync), reconfiguring SQL server, for a week, and about to reinstall the the whole SharePoint system on a new system, the above finally worked, and finally, everything worked (except for the UserProfileSync). Thank you very much.

  2. After changing the application pool identity for a web application, I got an Unexpected Error the first time I browsed to the site. In the error logs I says an error: “System.Data.SqlClient.SqlException: Cannot open database “Profile DB” requested by the login”. I looked in SQL Server Management Studio and I have to manually grant DBO user accounts to the new application pool identity for the databases Profile DB, Social DB and Sync DB

Leave a Reply

Your email address will not be published. Required fields are marked *