From 000a1db851fda7d519b04f66c8a70b8cf80beed0 Mon Sep 17 00:00:00 2001
From: Lex Li <425130+lextm@users.noreply.github.com>
Date: Tue, 9 Jul 2024 14:00:30 -0400
Subject: [PATCH] Update application-pool-identities.md (#1060)

Moved the picture down so that it matches what end users should see after step 7 and 8.
---
 .../configuring-security/application-pool-identities.md       | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/iis/manage/configuring-security/application-pool-identities.md b/iis/manage/configuring-security/application-pool-identities.md
index 3d65994b6..94370edf7 100644
--- a/iis/manage/configuring-security/application-pool-identities.md
+++ b/iis/manage/configuring-security/application-pool-identities.md
@@ -54,11 +54,11 @@ You can try this by selecting a file in Windows Explorer and adding the "Default
 4. Select the **Security** tab
 5. Click the **Edit** button and then **Add** button
 6. Click the **Locations** button and make sure that you select your computer.
-
-    ![Screenshot of the Select Users or Groups dialog.](application-pool-identities/_static/image9.jpg)
 7. Enter **IIS AppPool\DefaultAppPool** in the **Enter the object names to select:** text box.
 8. Click the **Check Names** button and click **OK**.
 
+    ![Screenshot of the Select Users or Groups dialog.](application-pool-identities/_static/image9.jpg)
+
 By doing this, the file or directory you selected will now also allow the **DefaultAppPool** identity access.
 
 You can do this via the command-line by using the ICACLS tool. The following example gives full access to the DefaultAppPool identity.