processModel Element for applicationPoolDefaults for applicationPools [IIS Settings Schema]

Note

For more information about the processModel element, see the following topic on the Microsoft IIS.net Web site: Process Model Settings for an Application Pool <processModel>.

Configures default process model settings for all application pools on a server.

Syntax

Attributes and Elements

The following sections describe attributes, child elements, and parent elements for this section.

Attributes

Attribute

Description

identityType

Optional enum attribute.

Specifies the account identity under which the application pool runs.

The identityType attribute can be one of the following possible values. The default is NetworkService.

ValueDescription
LocalServiceSpecifies that the application pool runs under the built-in LocalService account, which has the same user rights as NetworkService. When an application pool runs under the LocalService account, the application pool presents anonymous credentials on the network. The numeric value is 1.
LocalSystem

Specifies that the application pool runs under the built-in LocalSystem account, which has extensive priviledges on the local computer and acts as the computer on the network.

Note

Running an application pool under an account that has high-level user rights is a serious security risk.

The numeric value is 0.

NetworkServiceSpecifies that the application pool runs under the built-in NetworkService account. This is the default built-in account under which to run application pools. When an application pool runs under the NetworkService account, the application pool accesses network resources as the computer account. The numeric value is 2.
SpecificUser

Specifies that the application pool runs under a custom identity, which is configured by using the userName and password attributes.

Note

To avoid storing unencrypted password strings in configuration files, always use Appcmd.exe or IIS Manager to enter passwords. If you use these management tools, the password strings will be encrypted automatically before they are written to the XML configuration files. This provides better password security than storing unencrypted passwords.

The numeric value is 3.

idleTimeout

Optional timeSpan attribute.

Specifies how long (in minutes) a worker process should run idle if no new requests are received and the worker process is not processing requests. After the allocated time passes, the worker process should request that it be shut down by the WWW service.

The default value is 00:20:00.

loadUserProfile

Optional Boolean attribute.

Specifies whether IIS loads the user profile for the application pool identity. Setting this value to false causes IIS to revert to IIS 6.0 behavior. IIS 6.0 does not load the user profile for an application pool identity.

The default value is true.

manualGroupMembership

Optional Boolean attribute.

Specifies whether the IIS_IUSRS group Security Identifier (SID) is added to the worker process token. When false, IIS automatically uses an application pool identity as though it were a member of the built-in IIS_IUSRS group, which has access to necessary file and system resources. When true, an application pool identity must be explicitly added to all resources that a worker process requires at runtime.

The default value is false.

maxProcesses

Optional uint attribute.

Specifies the number of worker processes associated with the application pool. A value other than 1 indicates a Web garden.

The default value is 1.

password

Optional string attribute.

Specifies the password associated with the userName attribute. This attribute is only necessary when the value of identityType is SpecificUser.

Note

To avoid storing unencrypted password strings in configuration files, always use Appcmd.exe or IIS Manager to enter passwords. If you use these management tools, the password strings will be encrypted automatically before they are written to the XML configuration files. This provides better password security than storing unencrypted passwords.

pingingEnabled

Optional Boolean attribute.

Specifies whether pinging is enabled for the worker process.

The default value is true.

pingInterval

Optional timeSpan attribute.

Specifies the time between health-monitoring pings that the WWW service sends to a worker process.

The default value is 00:00:30 (30 seconds).

pingResponseTime

Optional timeSpan attribute.

Specifies the time that a worker process is given to respond to a health-monitoring ping. After the time limit is exceeded, the WWW service terminates the worker process.

The default value is 00:01:30 (1 minute 30 seconds).

shutdownTimeLimit

Optional timeSpan attribute.

Specifies the time that the W3SVC service waits after it initiated a recycle. If the worker process does not shut down within the shutdownTimeLimit, it will be terminated by the W3SVC service.

The default value is 00:01:30 (1 minute 30 seconds).

startupTimeLimit

Optional timeSpan attribute.

Specifies the time that IIS waits for an application pool to start. If the application pool does not startup within the startupTimeLimit, the worker process is terminated and the rapid-fail protection count is incremented.

The default value is 00:01:30 (1 minute 30 seconds).

userName

Optional string attribute.

Specifies the identity under which the application pool runs when the identityType is SpecificUser.

Child Elements

None.

Parent Elements

Element

Description

configuration

Specifies the root element in every configuration file that is used by IIS 7.

system.applicationHost

Specifies the root element for configuring Web process settings.

applicationPools

Specifies application pool configuration settings for a server.

applicationPoolDefaults

Specifies default settings for all application pools on a server.

Remarks

For more information about the processModel element, see the following topic on the Microsoft IIS.net Web site: Process Model Settings for an Application Pool <processModel>.

Element Information

Configuration locations

ApplicationHost.config

Requirements

Microsoft Internet Information Services (IIS) version 7.0