Virtual Application vs Virtual Directory

People are always confused by these two IIS concepts, especially for the new IIS7/WAS. These are not new concepts. They are available since IIS6 on Windows 2003 Server. However the terms were misused in IIS6 and they are corrected in IIS7 in Windows Vista and higher versions of Windows.

Virtual Application

What is it?

The term “virtual application” is a fundamental concept for IIS and ASP.NET. Here is the definition in my own words: a virtual application is a construction unit of a web site that participates protocol listening and process management. It can be uniquely identified by its absolute virtual path from that web site. For example, you can create a virtual application with virtual path “/foo” in the “Default Web Site”. For simplicity, we also call virtual application as “Default Web Site/foo” or simply “/foo”. Every web site has at least one virtual application, a.k.a, the root virtual application “/”.


A web site can be uniquely identified by its site ID. All of the web sites are under the same root “/W3SVC”. So each web site can be represented in the format of “/W3SVC/<SiteID>”. For example, the “Default Web Site” can be represented as “/W3SVC/1”. With this, we can uniquely identify a virtual application with its full path, for example,


If you have the IIS6 scripting tool “adsutil.vbs” installed, you would be able to check the settings of the virtual application with the following command:

cscript %systemdrive%\inetpub\adminscripts\adsutil.vbs enum /W3SVC/1/Root/foo

Protocol Listening

When you create a virtual application, you would expect your new virtual application to receive requests that are dedicated to it. There are two aspects of “protocol listening”:

  • For a particular protocol (for example HTTP), a web site is nothing but a list of virtual applications. This means that the protocol activation service (which is IIS or W3SVC in the HTTP case) registers a list of Urls in the protocol listener service (which is HTTP.sys driver for HTTP). Each of this Url is associated with a virtual application.

  • You can specify which protocol is enabled for a virtual application. In IIS6, you can specify HTTP or HTTPS. In IIS7, however, you can specify any protocol(s) through the “enabledProtocols” property of the virtual application. For example, you can specify protocols “net.tcp”, “net.pipe”, “net.msmq”, or “msmq.formatname” that are implemented by WCF.

Application Pool

The other aspect of a virtual application is that it also participates in process management. IIS/WAS has the concept of application pools. An application pool is a definition or template of a worker process (w3wp.exe) that is used by IIS/WAS to create new worker process instances. Two most important properties of an application pool are:

Each virtual application must be assigned to an application pool in IIS. All of the requests (except for static content) will be handled in worker processes in that application pool.


Please note that Application Pool is managed by WAS instead of IIS in the IIS7 family. This separation makes non-HTTP activation possible. With this refactoring, “IIS” is simply the web server that only handles HTTP/HTTPS requests.

ASP.NET Application

For ASP.NET, a virtual application has its real meaning as an “application”. When an ASP.NET request is first received in a virtual application, a new AppDomain is created in the worker process that handles subsequent ASP.NET requests. This includes all WCF requests. So in the ASP.NET world, a virtual application is mapped to an AppDomain. This provides important code isolation for managed applications that sits in the same worker process. It is even more important for web hosting when the applications are running in the partial trust environment.

Virtual Directory

Isn’t “virtual directory” the same as “virtual application”? In IIS6, from the IIS Manager (UI), if you right click on “Default Web Site” -> New, you will see “Virtual Directory …” from the list. What is going on there? Well, as I said, the terms are misused in IIS6. When it says “Virtual Directory”, it actually means “Virtual Application”.


Am I kidding? No. A real “virtual directory” is just a container of files. It is a construction unit of a virtual application, just like a virtual application to a web site. A virtual application must have at least one virtual directory. Here is a sample configuration section that defines the virtual application “/foo” and its virtual directories in the WAS’ configuration file %windir%\system32\inetsrv\config\applicationhost.config:


  <site name=Default Web Site id=1>

    <application path=/foo enabledProtocols=http>

      <virtualDirectory path=/ physicalPath=c:\inetpub\foo />

      <virtualDirectory path=/bar physicalPath=“\\myremote1\bar />




Note that the virtual directory “/bar” points to a different physical path, actually it points to a network share (UNC) path!


How can we create a real virtual directory in IIS6 then? It is a little bit trickier from the UI. In the IIS Manager UI, you can right click on the virtual application and then click on New -> “Virtual Directory …”. After specifying the alias and path, you will get the virtual directory using all default settings.


However, there is another trick to convert a virtual application into a virtual directory. Here are the steps:

  • Create a virtual application “/foo” and a sub virtual application “/foo/bar”.

  • Right click on the virtual application “/foo/bar” and select properties. You will see the properties dialog popped up.

  • Under the “Virtual Directory” tab, look for the “Remove” button. See the image below:

  • Click the “Remove” button and click on “OK” button.

Now you have created a virtual directory “/bar” under the virtual application “/foo”. The icon for the virtual application is different than that of the virtual application. Here is what you will see:


Virtual applications and virtual directories can be nested, meaning, a virtual application or directory can be created under another virtual application or directory in any combinations.


This nesting has the following implications:

  • The virtual path of the parent application/directory is the prefix of the child application/directory.

  • For ASP.NET, the web.config of the parent virtual application/directory affects the child application/directory.

  • For ASP.NET, the assemblies referenced by the parent virtual application are inherited by the children.
Other than those, virtual applications still have their own isolation that I mentioned in the above sections.

Comments (10)

  1. humlezg says:

    Wow… this is indeed confusing, even after the explanation  :/    

  2. Erik oppedijk says:

    It's even more trickier in IIS 6, when creating a virtual directory, don't select run scripts in the last page and you end with a virtual directory, not an application. When asp and are not installed, you allways get a virtual directory.

  3. says:

    Is virtual directory a separate ASP.NET process?

  4. Russell says:

    Dude I have been working with Apache and PHP. Trying to work with .NET is like pounding your head against a brick wall. Just getting a dev environment up  and running is a feat unto itself…

    After countless hours trying to get a machine up and figuring out differences like virtual application vs virtual directory, choosing C# or VB,   figuring out how the hell to connect to SQL server (oh whoops I had it on windows authentication and I needed to use mixed mode to support SQL Server authentication), figuring the difference between logins and users on SQL Server etc.. etc… etc…  

    Then after I get through all that crap, I can hardly even figure out how to write out hypertext to the screen because you have to know when to write the response in the page life cycle and crap.

    I have been pulling my dang hair out.

    How is PHP so easy? The virtual application concept in apache is soooo simple. I just convert the domain to a machine path, bind it to a port and BAM…

    I just echo hypertext to the screen BAM…

    I just use a single function to connect to MySQL/Oracle/Postgre or whatever and BAM…

    Common Microsoft……

  5. Joe V says:

    Thank you for this great explaination.  Reading this post was the first that made sense to me in understanding the differences between virtual directory and virtual application (and how IIS 6 misuse of the terms made it more confusing in my move to IIS 7)

  6. Aditya N says:

    In the case described above, website:Test Site 2 and virtual dir: foo, will have different app domain?

  7. Duh says:

    PHP is simple because is IS simple. Not appropriate for enterprise solution systems.

  8. LRob says:

    WDong, excellent article. I have been trying to use an httphandler in a nested virtual application, but the handler appear to be oblivious to the class library within my nested virtual. My understanding is that nested virtual apps inherit from parent web configs., etc.? What do I need to do to get my nested virtual app to recognize my httphandler? Thanks in advance.

  9. In Response to 'Duh' says:

    I never comment on these things, and I know this article is old, but the ignorance that Duh has expressed here is mind boggling. Keep drinking the koolaid Duh. Your statment is beyond idiotic.