liho1eye's questions

We have a problem on one of our production servers (Windows 2003 server). It appears all app pools are recycling every 10 seconds or so (all at the same time). Needless to say this is negatively affects applications' performance.

Symptoms:
- application caches are lost
- debug statements in application startup code are triggering
- background threads are stopped

Other things I discovered:
- surprisingly the w3wp.exe processes remain stable
- no anti virus running on that machine
- attempted to disable file change notification by adding <httpRuntime waitChangeNotification="1000000" /> and <compilation numRecompilesBeforeAppRestart="100000" /> to one of the applications, but it didn't help
- nothing suspicious in the Event Viewer

Not sure what else to try here.

Namely how is setting read/write permission for this account different from giving read/write access in the IIS (Windows 2003, so it should be IIS6 if I am not mistaken).

Here is the issue: It looks like we had a security sweep and as a part of that IUSR account lost write access everywhere. A whole bunch of legacy ASP sites didn't like that at all...

My very surfacish understanding is that it is enough to deny write access in the IIS console to protect a website from someone just dropping random files into it, and IUSR access only has effect on the application scripts running server side, and thus can be safely given write access back.

edit:

The applications in question obviously require write access to their own web folders, otherwise this wouldn't be an issue at all. Question is how to configure IIS/application to both satisfy security and make them work. My first instinct was to change account which is used to run the app pool. However that is already set to NETWORK_SERVICE, and that guy already has full access to folders in question.