when i changed the IIS application pool's and sharepoint services's Service Account i start receving the following error "403 FORBIDDEN"

Question

For security reasons we wanted to chnage the service accounts username for all the IIS application pools and SharePoint service , so we created a new user named "Staging.user", and i define it as a managed account inside SharePoint. and then we chnage the iis application pool and the SharePoint services to use this account, as follow:-

but after that some site collections will raise an 403 Forbidden error when trying to access them, while other will work. For example we have a list where all the views will work but the create form will raise 403 HTTP error , so we can edit the list items and delete them, but if we click on create form we will get 403 forbidden error.. so can anyone adivce what is causing this ? Thanks

Answer 1

Looks like you change the AppPool from IIS. It is highly recommended to update / Change the app Pool Account from SharePoint(central Admin / powershell).

• central admin > Security > Configure Service Accounts
• After Changing please perform IIS on all servers.
• One Most important thing, before changing the account you should make sure new Account should have right permission on all related Database & config database.