Question

Ive updated my process Model Identity from NetworkService to ApplicationPoolIdentity.

However,

What permissions did NetworkService had before and to what ?
What was his security permissions to the asp.net ?

and how do I clone the previuos permissions to the ApplicationPoolIdentity account ?

Answer 1

You should look here for an explanation of Application Pool identities:

http://learn.iis.net/page.aspx/624/application-pool-identities/

NETWORKSERVICE is a built-in Windows identity. It doesn’t require a
password and has only user privileges; that is, it is relatively
low-privileged. Running as a low-privileged account is a good security
practice because then a software bug can’t be used by a malicious user
to take over the whole system.