Microsoft KB Archive/285286

= Cannot Access IIS Metabase Through IIS Admin Objects =

Article ID: 285286

Article Last Modified on 11/21/2006

-

APPLIES TO


 * Microsoft Internet Information Services 5.0
 * Microsoft Internet Information Server 4.0

-



This article was previously published under Q285286



We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx



SYMPTOMS
When you try to access the Internet Information Services (IIS) metabase through the IIS Admin objects programatically in an ASP page, IIS returns the following error message to the client browser:

Microsoft VBScript runtime error '800a0046'

Permission denied: 'GetObject'

/filename.asp, line xxx



CAUSE
For security reasons, access to the metabase (and subsequently the IIS Admin Objects) is restricted to members of the local Administrators group.



WORKAROUND
Use an authentication technique such as basic, digest, Windows, or certificate mapping, and make sure that the account in question has access to the metabase (that is, the account is a member of the local Administrators group).

Under no circumstances should you add any user account to the local Administrator's group in an attempt to work around this issue. Doing so leads to major security vulnerabilities.

Additional query words: iis 5 metabase admin administer 4

Keywords: kbprb kbpending KB285286

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.