WCF service hosted with User in IIS WPG group? - wcf

Question

I have hosted WCF service on IIS 6 using a custom AppPool. This AppPool is configured to run under a user who is in IIS_WPG group.
I can access the service from a remote location and can see the wsdl as well, but when I try to access the same service through "WCF Test Client", I got following error
Update: When I run the same service by changing AppPool's identity to "Network Service" group, then service is accessible through test client. So service metadata isn't accessible only when service runs under identity other than "Network Service" (which is default identity for user)

Answer 1

I have experienced this problem in the past and the solution was to authenticate using a service account between client and the server hosting the service.

Answer 2

I have the same issue as described above.. Here are the things I've done while finding solution to this issue.
I will start will my deployment process of WCF to IIS6.
Create a folder into the server and copy the WCF package.
Create an AppPool for your WCF.
Right click the newly created AppPool, select Properties, then go to Identity tab. Select "configurable" then enter your service account credential instead of NETWORK SERVICE.
I didn't created a new web site. For my case, I created a virtual directory under the Default Web Site and point it to the WCF folder that I've copied.
Once the virtual directory is created, right-click on it then select Properties. Below are the settings for each tabs
Virtual Directory Tab
Click Create button to create application name.
Select "Scripts Only" in execute permission.
Select the AppPool that you have created.
Click Apply button to save changes.
Document Tab
Add new content - the name of your WCF .svc file.
Click Apply button to save changes.
Directory Security Tab
Click Edit button in Authentication and access control.
Change the user name and password with your service account credential.
Click OK (enter the password again if reconfirmation is needed).
Click Apply button to save changes.
ASP.Net Tab
Select 4.0.30319 version (if .net framework 4.0 is required)
Click Apply button to save changes.
Now, go to Computer Management > System Tools > Local Users and Groups > Groups
Open the IIS_WPG group and add your service account.
Then go to Start > Administrative Tools > Local Security Policy
Expand Security Settings > Local Policies > User Rights Assignment. Search for Log on as service then add your service account there.
Lastly, Go to C:\WINDOWS\Temp folder. Right click on it then select Properties. Click Security tab then add your service account.
To set a special permission, click Advance button.
Select your service account then click Edit button. In the list of permissions, tick or check only the "List Folder/Read Data" and "Delete" permissions. Click OK and Apply button to apply changes. If message box prompted you, click Yes to apply in sub folders.
Now, the final moment. Make sure the app pool is running. Test the WCF in browser and then in WCF Test client.
In my case it's working, perfectly :)
Hope this will help you...