IIS Registry Permissions

  • Thread starter Thread starter Adrian Dev
  • Start date Start date
A

Adrian Dev

Hi,

I hope I'm in the right newsgroup.

I have written a tiny IIS application, that allows a user to change some
local registry settings on the IIS server. (HKLM/Software/ACompany.... )

When I test it on a 'workgroup' IIS setup, it works fine, and the registry
hive is updated. But an Active directory installation where the IIS is a member server, as soon as the application
makes the OpenSubKey(path, true), to open the key for writing, registry access is denied.

Does anyone know if there is a Group policy setting somewhere thats blocking
this? I am using .NET1.1


thanks,
 
Have you considered using an OU for the IIS Servers and applying GPO to them. This would allow you to use the machine security which will allow you to solve this problem by applying registry security to open up access to the keys that are needed for the application. This approach will also allow you to lock down other service and features on the machine.

Computer Configuration\Windows Settings\Security Settings\Registry

Add in the key or keys required and assign the permissions required. The allow for the policy to replicated and use GPupdate /force on the server concerned to apply the policy. You can use RSOP.msc to confirm the group policy has been applied.

Dave Britt
Blog: http://davebritt.blogspot.com/

Hi,

I hope I'm in the right newsgroup.

I have written a tiny IIS application, that allows a user to change some
local registry settings on the IIS server. (HKLM/Software/ACompany.... )

When I test it on a 'workgroup' IIS setup, it works fine, and the registry
hive is updated. But an Active directory installation where the IIS is a member server, as soon as the application
makes the OpenSubKey(path, true), to open the key for writing, registry access is denied.

Does anyone know if there is a Group policy setting somewhere thats blocking
this? I am using .NET1.1


thanks,
 
Back
Top