Article ID: 2023852 - View products that this article applies to.
When you perform a Web Deploy operation that requires administrative permissions, you receive an error message similar to the following:
The user executing the operation does not have sufficient rights to access the ApplicationHost.config file and perform changes. For example, the error may occur in a Hosted scenario when the person executing the command is not the Administrator of the target hosting machine. By default, IIS requires administrative privileges to make configuration changes to the ApplicationHost.config file.
To resolve this problem, use one of the following methods depending on how the Web Deploy operation is being run:
Scenario 1: Web Deploy operation run from a command line using Msdeploy.exe:
Verify that the account performing the operation has the following permissions:
Warning: Granting these permissions to a non-administrator user will allow the user to access any IIS setting. This may not be secure for some environments. Microsoft recommends using the Web Deployment handler and delegation for non-admin scenarios.
Scenario 2: Web Deploy operation performed using delegation via the Web Management Service (WMSVC):
NOTE: The identity of the account will depend on how the Delegation Rule was configured and will be one of the following:
(http://go.microsoft.com/fwlink/?LinkId=151500)for other considerations.