Share via

processModel Element for add for applicationPools [IIS Settings Schema]

  • Article

Note

For more information about the processModel element, see the following topic on the Microsoft IIS.net Web site: Process Model Settings for an Application Pool <processModel>.

Configures the process model settings for an application pool.

Syntax

Attributes and Elements

The following sections describe attributes, child elements, and parent elements for this section.

Attributes

Attribute

Description

identityType

Optional enum attribute.

Specifies the account identity under which the application pool runs.

The identityType attribute can be one of the following possible values. The default is NetworkService.

Value Description
ApplicationPoolIdentity Specifies that the application pool runs under the dynamically-created application pool identity account. Starting in IIS 7.5, ApplicationPoolIdentity is the default identity under which to run application pools. (In IIS 7.0 the default identity was NetworkService.)When an application pool runs under the ApplicationPoolIdentity account, the application pool accesses resources as the "IIS AppPool\<AppPool>" identity. For example, for the "DefaultAppPool", the identity is "IIS AppPool\DefaultAppPool". This identity allows administrators to specify permissions that pertain only to the identity under which the application pool is running, thereby increasing server security.The numeric value is 4.
LocalService Specifies that the application pool runs under the built-in LocalService account, which has the same user rights as NetworkService.When an application pool runs under the LocalService account, the application pool presents anonymous credentials on the network.The numeric value is 1.
LocalSystem Specifies that the application pool runs under the built-in LocalSystem account, which has extensive priviledges on the local computer and acts as the computer on the network.

Note

Running an application pool under an account that has high-level user rights is a serious security risk.

The numeric value is 0.
NetworkService Specifies that the application pool runs under the built-in NetworkService account. This is the default built-in account under which to run application pools.When an application pool runs under the NetworkService account, the application pool accesses network resources as the computer account.The numeric value is 2.
SpecificUser Specifies that the application pool runs under a custom identity, which is configured by using the userName and password attributes.

Note

To avoid storing unencrypted password strings in configuration files, always use Appcmd.exe or IIS Manager to enter passwords. If you use these management tools, the password strings will be encrypted automatically before they are written to the XML configuration files. This provides better password security than storing unencrypted passwords.

The numeric value is 3.

idleTimeout

Optional timeSpan attribute.

Specifies how long (in minutes) a worker process should run idle if no new requests are received and the worker process is not processing requests. After the allocated time passes, the worker process should request that it be shut down by the WWW service.

The default value is 00:20:00.

loadUserProfile

Optional Boolean attribute.

Specifies whether IIS loads the user profile for the application pool identity. Setting this value to false causes IIS to revert to IIS 6.0 behavior. IIS 6.0 does not load the user profile for an application pool identity.

The default value is true.

logonType

Optional enum attribute.Specifies the logon type for the process identity. (For additional information about logon types, see the LogonUser Function topic on the Microsoft MSDN Web site.)

Note

This attribute was introduced in IIS 7.5.

The logonType attribute can be one of the following possible values; the default is LogonBatch.

Value Description
LogonBatch Specifies that the application pool identity should logon as a batch user.The numeric value is 0.
LogonService Specifies that the application pool identity should logon as a service.The numeric value is 1.

manualGroupMembership

Optional Boolean attribute.

Specifies whether the IIS_IUSRS group Security Identifier (SID) is added to the worker process token. When false, IIS automatically uses an application pool identity as though it were a member of the built-in IIS_IUSRS group, which has access to necessary file and system resources. When true, an application pool identity must be explicitly added to all resources that a worker process requires at runtime.

The default value is false.

maxProcesses

Optional uint attribute.

Specifies the number of worker processes associated with the application pool. A value other than 1 indicates a Web garden.

The default value is 1.

password

Optional string attribute.

Specifies the password associated with the userName attribute. This attribute is only necessary when the value of identityType is SpecificUser.

Note

To avoid storing unencrypted password strings in configuration files, always use Appcmd.exe or IIS Manager to enter passwords. If you use these management tools, the password strings will be encrypted automatically before they are written to the XML configuration files. This provides better password security than storing unencrypted passwords.

pingingEnabled

Optional Boolean attribute.

Specifies whether pinging is enabled for the worker process.

The default value is true.

pingInterval

Optional timeSpan attribute.

Specifies the time between health-monitoring pings that the WWW service sends to a worker process.

The default value is 00:00:30 (30 seconds).

pingResponseTime

Optional timeSpan attribute.

Specifies the time that a worker process is given to respond to a health-monitoring ping. After the time limit is exceeded, the WWW service terminates the worker process.

The default value is 00:01:30 (1 minute 30 seconds).

shutdownTimeLimit

Optional timeSpan attribute.

Specifies the time that the W3SVC service waits after it initiated a recycle. If the worker process does not shut down within the shutdownTimeLimit, it will be terminated by the W3SVC service.

The default value is 00:01:30 (1 minute 30 seconds).

startupTimeLimit

Optional timeSpan attribute.

Specifies the time that IIS waits for an application pool to start. If the application pool does not startup within the startupTimeLimit, the worker process is terminated and the rapid-fail protection count is incremented.

The default value is 00:01:30 (1 minute 30 seconds).

userName

Optional string attribute.

Specifies the identity under which the application pool runs when the identityType is SpecificUser.

Child Elements

None.

Parent Elements

Element

Description

configuration

Specifies the root element in every configuration file that is used by IIS 7.

system.applicationHost

Specifies the root element for configuring Web process settings.

applicationPools

Contains default configuration settings for all application pools on the server and defines configuration settings for specific application pools.

add

Configures an application pool in the server configuration.

Remarks

For more information about the processModel element, see the following topic on the Microsoft IIS.net Web site: Process Model Settings for an Application Pool <processModel>.

Default Configuration

None.

Element Information

Configuration locations

ApplicationHost.config

Requirements

Microsoft Internet Information Services (IIS) version 7.0

IIS 7.5

The <processModel> element of the <add> element was updated in IIS 7.5 to include settings that allow you run applications using the new ApplicationPoolIdentity and to specify the login type for the process identity.