SWarnberg
Posts: 3
Joined: Mon Dec 02, 2013 4:27 pm

AppPool Identity and Folder Permissions

Mon Dec 02, 2013 4:36 pm

Hi,

We're creating an application pool which has the ApplicationPoolIdentity set as the identity. We want to use this account for folder permissions when creating some folders. However, this doesn't work, probably because the CreateFolder actions happens before the application pool (and identity) is created.
In folder properties, we're setting "IIS AppPool" in the Domain and the application pool name in the User name.
Is there another way to get this working?

Regards,
Staffan

Daniel
Posts: 8237
Joined: Mon Apr 02, 2012 1:11 pm
Contact:  Website

Re: AppPool Identity and Folder Permissions

Tue Dec 03, 2013 4:14 pm

Hello Staffan and welcome to Advanced Installer forums,

Thank you for your interest in Advanced Installer.

Indeed, the "CreateFolders" standard action is executed before the web application site/pool is created. However, as a workaround you can add virtual directories which will point to your installation folders and, then enable for each one of them the "Allow anonymous web access -> Use application pool identity (IIS 7 or newer)" option from "Authentication" tab. If this doesn't help you, then I'm afraid you should create your own custom action which will add the related permissions. For example you can use ICACLS to set folder permissions.

Also, the custom action should be scheduled after "Install Execution Stage -> Finish Execution" actions group.

All the best,
Daniel
Daniel Radu - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

elou
Posts: 96
Joined: Tue Apr 14, 2015 9:12 am

Re: AppPool Identity and Folder Permissions

Wed Apr 11, 2018 9:35 am

Hello,
is there any progress for this feature since 2013?
Regards, Éric.

Daniel
Posts: 8237
Joined: Mon Apr 02, 2012 1:11 pm
Contact:  Website

Re: AppPool Identity and Folder Permissions

Tue Apr 17, 2018 9:28 am

Hello Éric,

Please note that we never added such an improvement on our roadmap. This is because of the design of Windows Installer standard actions in context with our IIS setup feature.

The solution to address this behavior will be to use the workarounds presented above.

All the best,
Daniel
Daniel Radu - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

davidjhomer
Posts: 55
Joined: Wed Jun 08, 2016 3:58 pm
Contact:  Website Facebook Skype Twitter

Re: AppPool Identity and Folder Permissions

Sun Apr 12, 2020 3:28 pm

Yes I just ran into this. It would be nice to have an AdvancedInstaller set permissions custom action which we could call later rather than cobbling together a script or using cacls.
CENTREL Solutions Ltd
Server audit and documentation tools.
http://www.centrel-solutions.com

Daniel
Posts: 8237
Joined: Mon Apr 02, 2012 1:11 pm
Contact:  Website

Re: AppPool Identity and Folder Permissions

Mon Apr 13, 2020 1:39 pm

Hi,

Thank you for your feedback on this. I have forwarded it to our dev team and hopefully they will consider such improvement in the future.

When so, we will update this forum thread.

All the best,
Daniel
Daniel Radu - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

Daniel
Posts: 8237
Joined: Mon Apr 02, 2012 1:11 pm
Contact:  Website

Re: AppPool Identity and Folder Permissions

Thu Oct 07, 2021 9:31 am

Hi,

We have further investigated on this and it seems you can accomplish this request by using the following workaround solution:

1. in "Files and Folders" page make sure you check the "Keep existing permissions" flag on your folder permissions dialog

2. in "Dialog Editor" page select "InstallExecuteSequence" table

3. edit the sequence number of "AI_ConfigPermissions" action and the one of its AI_DATA_SETTER precedent action to be greater than (e.g. 6601) the one of "AI_IIsInstall" action; and also increment the sequence number of "InstallFinalize" action to be greater than (e.g. 6602) the one of "AI_ConfigPermissions" action

Check the attached screenshot.
screen.jpg
screen.jpg (261.91KiB)Viewed 30021 times
Hope this helps.

All the best,
Daniel
Daniel Radu - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

Return to “Common Problems”