IIS application pool identity account passwords shown in clear text

Question

When I use the appcmd list appool /text:* command, it shows me the application pool identity passwords in clear text. I am able to view

Answer 1

The passwords are only decrypted if you run appcmd as Administrator. If you run as a normal account, you get back the encrypted string.

This will be something like [enc:IISSomethingProvider:…:enc], just as you find it in applicationHost.config.