Diary of a random sysadmin

one of our clients has 2 appliction poools running on 2 "loadbalanced" (a low level config) IIS machines.
only one can be an active directory controller ( cuz they can't sync as "loadbalanced")


their app's where dieing on the machine that wasn't a DC and they didn't know why.. almost demanding we make it a DC again. I said I'll look into it.


i google search :
"The identity of application pool, is invalid."
& come up with a few leads :
http://www.issociate.de/board/post/155341/IIS6_Application_Pool_-_Unspecified_Error_/_Service_Unavailable.html then i got http://technet2.microsoft.com/WindowsServer/en/library/3429a680-e4aa-4a32-b364-8c4ddde552af1033.mspx?mfr=true which i tried & it fixed the problem, but only for 1 app


Then i found this http://dallas.sark.com/SarkBlog/cboland/archive/2005/11/28/2267.aspx which about half way down says this : Create a domain service account (MYDOMAIN\SvcAcct) in Active Directory. Nothing special here, no special privileges, just a member of Domain Users group. On the target web server (WebSvr1), add MYDOMAIN\SvcAcct to user group, IIS_WPG.
Which i did & Walla.. it works!