title: IIS application pool identity account passwords shown in clear text
body: <p>When I use the <code>appcmd list appool &lt;ApplicationPoolName&gt; /text:*</code> command, it shows me the application pool identity passwords in clear text. I am able to view the passwords in clear text using <code>Get-WMIObject</code> in PowerShell as well. This can be a serious security threat as a user with correct access credentials can easily view the passwords.</p>
  
  <p>The Application Pool in IIS (v7.5) is configured using domain user account/password. In the <code>applicationHost.config</code> file, the password is encrypted using <code>IISWASOnlyAesProvider</code> encryption provider. Still, the password is shown in clear-text when I use any of the above two methods. </p>
  
  <p>Is there any way to encrypt passwords in such a way that they are not shown in clear-text when I use the above two methods?</p>