Article ID: 267904 - Last Review: September 22, 2011 - Revision: 10.0

The MetaAcl tool for modifying metabase permissions on the IIS Admin Objects is available

View products that this article applies to.
System TipThis article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.
This article was previously published under Q267904
Important This article contains information about how to edit the metabase. Before you edit the metabase, verify that you have a backup copy that you can restore if a problem occurs. For information about how to do this, see the "Configuration Backup/Restore" Help topic in Microsoft Management Console (MMC).
Expand all | Collapse all

SUMMARY

You can use the MetaAcl.vbs tool to modify the default permissions that are set on an Internet Information Services (IIS) metabase.

You might have been redirected to this Microsoft Knowledge Base article from the following IIS error message:
System.Web.Hosting.HostingEnvironmentException: Failed to access IIS metabase. The process account used to run ASP.NET must have read access to the IIS metabase (e.g. IIS://servername/W3SVC). For information on modifying metabase permissions, please see http://support.microsoft.com/?kbid=267904.
You receive this error message because the permissions to the metabase are insufficient, or because the permissions are set incorrectly.

To help resolve this error, use the MetaAcl tool to modify the metabase permissions. For more information about the MetaAcl tool and about how Access Control Lists (ACLs) work, click the following article number to view the article in the Microsoft Knowledge Base:
326902  (http://support.microsoft.com/kb/326902/ ) ACLs and using MetaAcl for metabase ACL permission changes
Back to the top

MORE INFORMATION

The following file is available for download from the Microsoft Download Center:
Collapse this imageExpand this image
Download
Download the Metaacl.exe package now. (http://download.microsoft.com/download/5/7/3/57316f36-ded6-41f0-b694-8b0102ade818/Metaacl.exe)
Release Date: July 16, 2003

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591  (http://support.microsoft.com/kb/119591/ ) How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

The Metaacl.exe file contains the following files:
Collapse this tableExpand this table
File nameSize
Metaacl.vbs7,380 bytes
EULA.txt1,652 bytes


For a full discussion about how to use the MetaAcl.vbs tool, click the following article in the Microsoft Knowledge Base:
326902  (http://support.microsoft.com/kb/326902/ ) ACLs and using MetaAcl for metabase ACL permission changes
Note If you are using ASP.Net 2.0 and you must grant metabase permissions to a Windows user account, do not use the MetaAcl tool. Instead, run the ASP.NET IIS Registration Tool command together with the -ga option. For example, the following command grants the Windows user account <WindowsUserAccount> permissions to the IIS metabase:
aspnet_regiis -ga <WindowsUserAccount>
Warning If you edit the metabase incorrectly, you can cause serious problems that may require that you reinstall any product that uses the metabase. Microsoft cannot guarantee that problems that result if you incorrectly edit the metabase can be solved. Edit the metabase at your own risk.

Note Always back up the metabase before you edit it.
Back to the top

REFERENCES

For more information, see the following Microsoft Knowledge Base article, or visit any of the following Microsoft Web sites:
326902  (http://support.microsoft.com/kb/326902/ ) ACLs and using MetaAcl for metabase ACL permission changes
IIS Metabase (IIS 6.0)
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/43a51d34-7c81-413b-9727-ec9a19d0b428.mspx?mfr=true (http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/43a51d34-7c81-413b-9727-ec9a19d0b428.mspx?mfr=true)
AdminACL Metabase Property (IIS 6.0)
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/791d575e-5364-45a9-90ef-4dfd23f38d67.mspx?mfr=true (http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/791d575e-5364-45a9-90ef-4dfd23f38d67.mspx?mfr=true)
IIS Metabase (IIS 5.0)
http://technet.microsoft.com/en-us/library/Bb727104.aspx (http://technet.microsoft.com/en-us/library/Bb727104.aspx)
Admin Base Objects in IIS
http://msdn2.microsoft.com/en-us/library/ms525530.aspx (http://msdn2.microsoft.com/en-us/library/ms525530.aspx)
Back to the top
APPLIES TO
  • Microsoft Internet Information Services 6.0
Back to the top
Keywords: 
kbproductlink kbresolve kbdownload kbfile kbgraphxlinkcritical kbinfo KB267904
Back to the top