Microsoft Knowledge Base Email Alertz

(267904) - The sample that is provided in this article illustrates how you can view, set, or delete metabase permissions for the IIS Admin Objects in a Windows Scripting Host file.

Search KbAlertz

Advanced Search

Receive Microsoft Knowledge Base articles by E-Mail?

Every night we scan the Microsoft Knowledge Base. If technologies you're interested in are updated, we'll send you an e-mail. You only get one e-mail a day, and only when new articles are added.

Click here to create a
FREE account
Already have an account?
[Click here to Login]











Microsoft Knowledge Base Article

This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved. Terms of Use | Trademarks

Article ID: 267904 - Last Review: September 22, 2011 - Revision: 10.0

The MetaAcl tool for modifying metabase permissions on the IIS Admin Objects is available

This article was previously published under Q267904
Important This article contains information about how to edit the metabase. Before you edit the metabase, verify that you have a backup copy that you can restore if a problem occurs. For information about how to do this, see the "Configuration Backup/Restore" Help topic in Microsoft Management Console (MMC).

SUMMARY

You can use the MetaAcl.vbs tool to modify the default permissions that are set on an Internet Information Services (IIS) metabase.

You might have been redirected to this Microsoft Knowledge Base article from the following IIS error message:
System.Web.Hosting.HostingEnvironmentException: Failed to access IIS metabase. The process account used to run ASP.NET must have read access to the IIS metabase (e.g. IIS://servername/W3SVC). For information on modifying metabase permissions, please see http://kbalertz.com/Feedback.aspx?kbNumber=267904.
You receive this error message because the permissions to the metabase are insufficient, or because the permissions are set incorrectly.

To help resolve this error, use the MetaAcl tool to modify the metabase permissions. For more information about the MetaAcl tool and about how Access Control Lists (ACLs) work, click the following article number to view the article in the Microsoft Knowledge Base:
326902  (http://kbalertz.com/Feedback.aspx?kbNumber=326902/ ) ACLs and using MetaAcl for metabase ACL permission changes

MORE INFORMATION

The following file is available for download from the Microsoft Download Center:
Collapse this imageExpand this image
Download
Download the Metaacl.exe package now. (http://download.microsoft.com/download/5/7/3/57316f36-ded6-41f0-b694-8b0102ade818/Metaacl.exe)
Release Date: July 16, 2003

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591  (http://kbalertz.com/Feedback.aspx?kbNumber=119591/ ) How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

The Metaacl.exe file contains the following files:
Collapse this tableExpand this table
File nameSize
Metaacl.vbs7,380 bytes
EULA.txt1,652 bytes


For a full discussion about how to use the MetaAcl.vbs tool, click the following article in the Microsoft Knowledge Base:
326902  (http://kbalertz.com/Feedback.aspx?kbNumber=326902/ ) ACLs and using MetaAcl for metabase ACL permission changes
Note If you are using ASP.Net 2.0 and you must grant metabase permissions to a Windows user account, do not use the MetaAcl tool. Instead, run the ASP.NET IIS Registration Tool command together with the -ga option. For example, the following command grants the Windows user account <WindowsUserAccount> permissions to the IIS metabase:
aspnet_regiis -ga <WindowsUserAccount>
Warning If you edit the metabase incorrectly, you can cause serious problems that may require that you reinstall any product that uses the metabase. Microsoft cannot guarantee that problems that result if you incorrectly edit the metabase can be solved. Edit the metabase at your own risk.

Note Always back up the metabase before you edit it.

REFERENCES

For more information, see the following Microsoft Knowledge Base article, or visit any of the following Microsoft Web sites:
326902  (http://kbalertz.com/Feedback.aspx?kbNumber=326902/ ) ACLs and using MetaAcl for metabase ACL permission changes
IIS Metabase (IIS 6.0)
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/43a51d34-7c81-413b-9727-ec9a19d0b428.mspx?mfr=true (http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/43a51d34-7c81-413b-9727-ec9a19d0b428.mspx?mfr=true)
AdminACL Metabase Property (IIS 6.0)
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/791d575e-5364-45a9-90ef-4dfd23f38d67.mspx?mfr=true (http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/791d575e-5364-45a9-90ef-4dfd23f38d67.mspx?mfr=true)
IIS Metabase (IIS 5.0)
http://technet.microsoft.com/en-us/library/Bb727104.aspx (http://technet.microsoft.com/en-us/library/Bb727104.aspx)
Admin Base Objects in IIS
http://msdn2.microsoft.com/en-us/library/ms525530.aspx (http://msdn2.microsoft.com/en-us/library/ms525530.aspx)

APPLIES TO
  • Microsoft Internet Information Services 6.0
Keywords: 
kbproductlink kbresolve kbdownload kbfile kbgraphxlinkcritical kbinfo KB267904
       

Community Feedback System

Very often, it takes hours to solve a problem. Very often, you've looked high and low, and have tried a lot of solutions. When you finally found it, chances are, it was because someone else helped you. Here's your chance to give back. Use our community feedback tool to let others know what worked for you and what didn't.

Please also understand that the community feedback system is not warranted to be correct, it's simply a system that we've built to let people try and help each other. If something in a feedback response doesn't make sense to you, or you're not comfortable making changes that the feedback talks about (like registry edits), please consult a professional.

Thank you for using kbAlertz.com Feedback System.

-- Scott Cate