Events 4505 and 4506 are logged in the Security log when you turn on the metabase auditing feature in Internet Information Services 6.0

When you turn on the metabase auditing feature in Internet Information Services (IIS) 6.0, the following events are intermittently logged in the Security log.

Event 4505

Event Type: Success Audit
Event Source: IIS-METABASE
Event Category: Object Access
Event ID: 4505
Date: date
Time: time
User: domain_name\user_name
Computer: computer_name
Description:
Metabase Set Data.

Primary User Name: user_name
Primary User Domain: domain_name
Primary Logon ID: (0x0,0x73DA0)
Path: /LM
Property ID: 6269
Property Name:
Old Value:
New Value: 4660
Caller PID: 2432
Caller Image Path: \Device\HarddiskVolume7\WINDOWS\system32\mmc.exe
Result: 0x0

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event 4506

Event Type: Success Audit
Event Source: IIS-METABASE
Event Category: Object Access
Event ID: 4506
Date: date
Time: time
User: domain_name\user_name
Computer: computer_name
Description:
Metabase Delete Data.

Primary User Name: user_name
Primary User Domain: domain_name
Primary Logon ID: (0x0,0x73DA0)
Path: /LM
Property ID: 6269
Property Name:
Old Value: 4660
Caller PID: 2432
Caller Image Path: \Device\HarddiskVolume7\WINDOWS\system32\mmc.exe
Result: 0x0

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Even though it seems that some data is set instead of deleted, you do not see any changes in IIS 6.0.

You can safely ignore these events. These events are logged when you view item properties in IIS Manager.

For more information about how to turn on the metabase auditing feature in IIS 6.0, click the following article number to view the article in the Microsoft Knowledge Base: