Application Pool Password Recovery

I had to figure out an App Pool password. Depending on your version of IIS you can extract passwords. You just need to login remotely and have local admin access.

For IIS 6

Download resource kit from

And run Metabase Explorer, then just browse to your App Pool. Change your view settings to show Secure Data.

For IIS 7+

run this powershell command with your app pool name.

&$env:windir\system32\inetsrv\appcmd.exe list apppool “Application Pool Name” /text:ProcessModel.Password