Can I stop and start a windows service from IIS app running under application pool identity?

Question

I have an IIS web application that is run under an application pool identity. The app needs to stop and start a windows service. Apart from introducing impersonation into the application for stopping and starting the service, is there any other way I can do this?

Note that I am looking for a solution other than running the application pool under a windows user that has the permission to stop and start the service.

Answer 1

You can do this through your app pool if:

1- Your local and/or domain security policies allow a service to stop/start another service.

2- Your app pool identity has the right to do so.

Granting the app pool identity such a right might be a security issue though.