---
title: Windows IIS Application Pool Strategy
slug: kronpam-reference-guide-3-6-0/windows-iis-application-pool-strategy
docTags: 
createdAt: 2024-12-03T08:15:19.361Z
---

This section will explain how to change the user-defined password for IIS Anonymous Authentication using Application Configuration and Trigger.

WinRM service must be installed on those servers.

IIS information must be configured for this option, and the following example should be used.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/64RJ3rFhvfc2xJHVv4I2-_image.png" size="78" width="943" height="619" position="center" caption="IIS Application Pools Definition Screen" showCaption="true"}

The Application Pool for password change must be selected, and the user value must be assigned. 

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/pyHvFZbEbi1Ig6sQ_TQ3h_image.png "IIS Application Pools Assign User Screen")

An Application Trigger Config definition must first be made for this option.

1. Navigate to the **Secrets > Configurations > Application Configuration.**
2. Click the **+Add **button.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Q322QlrKysvQt6b_AFl4u_image.png)

-  Enter the parameters. 

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/g7uvCG4TF7FYZTTDGxUx6_image.png "Application Configuration Definition Screen")

- Windows IIS Application Pool is selected as the **Strategy.**
- The Windows IIS Application Pool will use the WinRM service; therefore, WinRM port information must be entered.
- Select NTLM as the WinRM Authentication Method and click the **Save** button.
- Navigate to  **Secrets >Application Management** screen.
- Click the +**Add** button.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/BgGYoXuHVz3NVzaZupbUI_image.png)

When the password of the Vault account is changed, reset, or updated, in Windows IIS Application Pool a trigger is defined so that the password defined for the trigger is also changed automatically. Enter the name of the trigger in the Name field. Select the **Application Configuration** that defines the name above definition.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/8tSO3dmgsWXYUm8WLrmBz_image.png" size="58" width="500" height="584" position="center" caption="Application Trigger Definition Screen for IIS Application Pool Strategy" showCaption="true"}

The IIS Application Pool Name field must be entered from IIS.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Q08l7CZ3r6mIBa9GTov9x_image.png "IIS Application Pools Name Show Screen")

1. For the IIS changes to be active, a Restart operation may be required on the IIS side. If you want to restart, set the **Restart-Service After Command Run** switch box to **On**. <u>**But remember that all users will close their sessions at this time.**</u>
2. Select the Vault Account defined in Password Vault and whose password we want to change.
3. If the user defined for Password Vault is an authorized user to make changes on IIS, the **Use Authentication User&#x20;**&#x73;witch box is turned off. If it is not an authorized user, the **Name and Password&#x20;**&#x69;nformation of th&#x65;**&#x20;Administrator user** must be entered in the relevant fields.
4. The Target Type value should be selected as **Single Device**.
5. The device information where IIS is installed and the device to be modified must be selected.
6. If all field values are entered, Click the **Save** button and the configuration will be completed.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Nqftb4hF0XCg0drk5K_We_image.png "Application Trigger Definition Screen for IIS Application Pool Strategy")

- The Vault screen must be opened, and the Vault account must be selected.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/yvqQITIrsZC6_yT14UsoP_image.png)

- Click the **Action** button and a new popup will be shown.
- If **Reset Password** or **Update Password** is clicked, the system will change the password information from Windows Local User or Active Directory for the selected account. Additionally, a new Application Trigger record will be created by the system to change the password on the IIS server.
- The Application Management screen must be opened, and the defined record must be listed. To start this record and change the password from the IIS site immediately, the Run button must be clicked. Otherwise, the Application Trigger job will automatically run this record according to the defined period.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/sQqndQtYiZhOkw_BCtOw2_image.png)