What does ApplicationPoolIdentity apply to?

Question

When I use ApplicationPoolIdentity on a website deployed in a single window (Win Server 2008 R2) and try to access SQL Server, I get:

Login failed for user "NT AUTHORITY \ ANONYMOUS LOGON".

but the same configuration on another field (Win7) gives me:

Login failed for user DOMAIN \ MACHINE $.

Both applicationHost.config files have:

 <anonymousAuthentication enabled="true" userName="IUSR" /> 

Question : where is the difference in configuration? more specifically, what do I need to configure the process (website) to authenticate with DOMAIN \ MACHINE $?

Context: IIS7 (Windows 7 and Windows Server 2008 R2)

Answer 1

For information about IIS ApplicationPoolIdentity and how to configure it, see the IIS.net Application Pool Identifiers article.

Answer 2

After a great search, I came across this Microsoft fix: http://support.microsoft.com/kb/2545850 . This seems to be resolved for me. I would have to pay tribute to a few other StackExchange questions:

Is an IIS application using the application pool identifier losing the main token? http://serverfault.com/questions/217547/applicationpoolidentity-iis-7-5-to-sql-server-2008-r2-not-working

Answer 3

It looks like you are using an integrated security system. One box is in the domain and the other is not. You either need to create SQL logins for these accounts, or it is easier to use SQL authentication. What is your connection string?