Configure IIS Application Pools and Folder Permissions for HRPro

Configure these settings after deploying HR Workspace and the Employee Portal (EPortal) in IIS. Skip the EPortal steps if it is not installed.

1. Configure application pools

1. Open IIS Manager and select Application Pools.

2. Create HRWorkspacePool for HR Workspace and EPortalPool for EPortal.

3. Use these settings for both pools:

   • .NET CLR Version: v4.0

   • Managed Pipeline Mode: Integrated

   • Identity: ApplicationPoolIdentity

4. Under Sites, select each application and open Basic Settings.

5. Assign HRWorkspacePool to HR Workspace and EPortalPool to EPortal.

Leave other settings at their defaults unless your HRPro release requires otherwise.

2. Set folder permissions

Grant each application pool account Read & execute permission on its application folder:

• C:\inetpub\wwwroot\HRWorkspace: Add IIS AppPool\HRWorkspacePool.

• C:\inetpub\wwwroot\EPortal: Add IIS AppPool\EPortalPool.

IIS supports assigning folder permissions directly to these application pool accounts.

To add the permission:

1. Right-click the folder and select Properties > Security > Edit > Add.

2. Under Locations, select the local server.

3. Enter the account name above and click Check Names.

4. Click OK, allow Read & execute, and apply the changes.

Grant Modify permission only to specific folders that the application must write to, such as confirmed upload or export folders. Do not grant Modify or Full control to the entire application folder.

3. Test the applications

Open HR Workspace and EPortal, then confirm that sign-in and any required upload or export functions work.

If a file-access error occurs, check permissions on the affected folder. Do not switch the application pool to LocalSystem as a general fix; HRPro’s guidance warns that this account has extensive privileges.