HC9.02) How do I configure each new site to run with permissions "IISApppool/websitename"?

Currently the system permissions are hosed on HC9.02, it creates by default a new site with application pools as follows:
site: newsite (apppool: newsite / Identity: ApplicationPoolIdentity / Folder Permissions: Network Service(REMOVE THIS) / newsite_web / newsite_ftp
 virtualdirectory: /somevirtualdirectory (apppool: DefaultAppPool(REMOVE THIS) / Folder Permissions: newsite
It should however for best security be setup as follows upon creation:
 site: newsite (apppool: newsite / Identity: ApplicationPoolIdentity / Folder Permissions: "IIS AppPool/newsite" / newsite_ftp
  any virtualdirectory: /somevirtualdirectory (apppool: newsite / Idendity: ApplicationPoolIdentity / Folder Permissions: "IIS AppPool/newsite" / newsite_ftp
Where in the backend can I configure how it does this when a new site is created?