I need to change application pool account for SP 2016 web application from farm account to service account, i did the same steps here


the web application isn't browsed with 500 internal error !!!!!!!!!

Am i missing any permission?

2 Answers 2


Before changing the account ( following the blog) you have to make sure couple of things.

  • New service account should have Database Permission SPdataAccess role on the Content Database and Config database. You have to manually set this on the database Server.
  • Also make Sure new service account is part of IIS_IUSRS group on the server.It is local group...go to computer management > Local User and Groups.
  • Reset IIS after changing the App Pool account ( after following Blog steps).

If stil throwing the error, check the event log on the server to get more error information.

  • thank you , only SPdataAccess , no owner ?!
    – Aashirya
    Apr 28, 2017 at 12:48
  • if SPdataacess did not work then you can make it DBowner
    – Waqas Sarwar MVP
    Apr 28, 2017 at 12:49
  • no avail, event log An exception occurred when trying to establish endpoint for context: Could not load file or assembly 'Microsoft.IdentityModel.Extensions, Version=, Culture=neutral, PublicKeyToken=69c3241e6f0468ca' or one of its dependencies. Provider type not defined. (Exception from HRESULT: 0x80090017). task category Claims Authentication
    – Aashirya
    Apr 28, 2017 at 12:57
  • so this is log on as batch right issue...check this to fix it social.technet.microsoft.com/wiki/contents/articles/…
    – Waqas Sarwar MVP
    Apr 28, 2017 at 12:59
  • 1
    User needs to be in the local IIS WPG group to run an app pool. Check the event viewer. May 1, 2017 at 0:49

Please follow

Have the application pool identities for all farm web applications configured with Logon as batch and Impersonate a client at authentication local rights. After granting the identities these rights, restart the application pools.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.