title: app pool identity - farm admin
body: <p>The userid that is the identity of the application pool is also in the Farm Administrators group.</p>
  
  <p><strong>Is that a bad thing?</strong> </p>
  
  <p>We started seeing some weird permission errors after this change was made (that userid was added to the farm admin group).</p>