How to change the account the ISecurityTrimmer2 runs under?

Question

If you have a registered security trimmer, it gets loaded into an instance of w3wp.exe running as Network Service. My trimmer needs to connect to and authenticate to a remote service, so I'd like it to run as a domain account. I've found the app pool for this w3wp, but IIS admin says that there are 12 applications running in the app pool. Without knowing what else is running in that app pool, it's hard to know the effects of changing its account.

Is it possible to move the trimmer to its own app pool? Is there another way to change the account that my trimmer runs under?

Answer 1

From the Central Administration page, choose "Configure service accounts". You can change the account for "Service Application Pool - SharePoint Web Services Default", which is what hosts the Search Service Application. This pool hosts all 12 services listed, and it seems like they can't run as different accounts. As long as there is a single account that is appropriate to host all of these components, having SharePoint manage the credentials is far cleaner than managing it yourself.

Answer 2

Remote services usually have an option to provide appropriate credentials. For example, web service proxy classes have Credentials property for that:

Service1 myProxy = new Service1();
myProxy.Credentials = System.Net.CredentialCache.DefaultCredentials;
var result = myProxy.HelloWorld();