This article only applies to Squared Up Version 2.0. If you're looking for help with Squared Up Version 3.0, please visit our new knowledge base

The Squared Up application pool identity is the account Squared Up uses to connect to the data warehouse. By default, the Squared Up ASP.NET application pool uses the Network Service identity, but you may need to change this. If you change the application pool identity you must follow the instructions below to give the new application pool identity the correct permissions to the Squared Up folders and access to the data warehouse.

1. Check which Application Pool Squared Up is using

1. In IIS expand Default Web Site and right-click on the SquaredUp website.

2. Go to Manage Application > Advanced Settings.

3. Check that the Application Pool is SquaredUpv2

2. How to check or change the Application Pool Identity

You can check the application pool identity by using IIS:

1. In IIS, click on Application Pools.

2. Right-click on Squaredupv2 and select Advanced Settings.

3. Under Process Model, you will see Identity.  By default this is set to NetworkService, but if you wish to change the application pool identity you can change it here.  Make sure you choose an account which will NOT be used by a user to logon to Squared Up.

Important: If you have changed the application pool identity you must grant the application pool identity write permission to the Squared Up directories.  This can be done easily using the Squared Up config tool as explained below. If you are using a file share with high availability (HA) you will need to give the new application pool identity permissions to the share, see How to sync dashboards between servers

3. Apply the correct file permissions automatically

How to re-apply permissions if the application pool identity is not NetworkService

It is important to note that the account you are logging into Squared Up with has no effect on disk read/write permissions. What is important is the user (identity) of the application pool inside IIS which is being used by Squared Up.

  1. First, find the SID for the application pool identity account by issuing the following command from a command prompt (replacing username with the name of your new application pool identity account, and domain with your domain name) and noting the value returned:

    wmic useraccount where (name='username' and domain='domain') get sid

    This command will return a SID value - for example: S-1-5-21-3684388899-3955262116-226316336-1130
  2. To automatically give this user the correct permissions to the different parts of the Squared Up folder hierarchy, run the following command (replacing the SID shown with the one returned by the command above):

    "C:\inetpub\wwwroot\squaredupv2\tools\config.exe" applypermissions S-1-5-21-3684388899-3955262116-226316336-1130 

How to re-apply permissions for NetworkService

If you have had problems and need to re-apply the correct permissions for the application pool identity of NetworkService you can simply use the following from a command prompt :

"C:\inetpub\wwwroot\squaredupv2\tools\config.exe" applypermissions

This uses the SID of NetworkService (which has a fixed SID which is S-1-5-20) and gives this access to the folders, as the installer does.

4. Configure the data warehouse

If the application pool identity has been changed you will need to give the new application pool identity account access to the data warehouse.

See Configuring the data warehouse connection.

Permissions reference

Applying file permissions manually

If you need to apply permissions manually, you need to give the application pool identity Read/Write/List permissions to the following directories in C:\inetpub\wwwroot\SquaredUpv2:

  • AppState
  • Configuration
  • Log
  • UserProfiles
  • UserContentStorage

What the configuration tool does...

In order to modify permissions, the configuration tool is doing the following:

  • Allow: Modify, read and execute, list directory , read, write, delete subdirectories and files, delete.
  • File system rule: Container inherit, object inherit, no propagation

At the time of writing, the configuration tool adjusts permissions for the following paths (described here using Ant glob syntax):

  • Log/**/*.*
  • UserContentStorage/**/*.*
  • Configuration/**/*.*
  • UserProfiles/**/*.*
  • AppState/**/*.*
  • Maps/**/*.*
  • Plugins/**/*.*


The Squared Up installer cannot preserve the custom application pool identity during upgrade. After upgrading, you must manually set the application pool identity back to your custom acount. See Upgrading Squared Up.