Metaacl.exe can modify the metadatabase permission of the IIS Admin object.

Note: : If you are using ASP. NET 2.0 and you must grant the metadatabase permission to a Windows User Account. Run ASP. net IIS registration tool command, instead of using the tool shown here. For example, the following command line grants <Windowsuseraccount> Permission:

 
Aspnet_regiis-ga <windowsuseraccount>
 

You can download the following file from the Microsoft download center: collapse the image and expand the image.

Download the metaacl.exe package now. Http://download.microsoft.com/download/5/7/3/57316f36-ded6-41f0-b694-8b0102ade818/metaacl.exe)
Released on: February 1, July 16, 2003

For more information about how to download microsoft files, clickArticleTo view the articles in the Microsoft Knowledge Base:

119591 (http://support.microsoft.com/kb/119591/) How to Get Microsoft support files from online services

Microsoft has scanned the file for viruses. Microsoft uses the latest virus detection software that can be obtained when the file is published. This file is stored on a server with enhanced security to help prevent unauthorized changes. The metaacl.exe file contains the following files: collapse the table and expand the table.

File Name	Size
Metaacl. vbs	7,380 KB
Eula.txt	1,652 KB

To learn how to use metaacl. vbs, you can run this file directly at a command prompt without any parameters. To obtain the best results, make sure that cscript.exe is the default script interpreter or run:

Cscript metaacl. vbs

CodeYou can use metaacl. vbs as a templateProgramAdd similar code. This file has not been fully tested, so for simplicity, it does not perform detailed error handling.

Warning: Improper editing of metadatabase may cause serious problems. You may need to reinstall all products that use metadatabase. Microsoft cannot guarantee that problems caused by your incorrect metadata editing can be solved. You are at your own risk to edit the metadatabase.

Note:: Back up the metabase every time you edit it.
In Internet Information Service (IIS), you can modify the people who have the right to access the IIS metadatabase by manually adding the group and users to the "operator" on the Microsoft console. When you perform this task programmatically, you can add groups and individuals so that they have operator access permissions, or apply more detailed control over the specific creden。 granted to these users and groups.

The permission to access the IIS Admin object is controlled by the "adminacl" attribute on each metadatabase key. This attribute contains a security descriptor, which can be modified like any other security descriptor. You can set this security descriptor to control access to the metabase key.

This function may be helpful when your web applications require common users to read the values of some metadatabase attributes. By default, normal users are not granted the permission to read the attributes of the metabase.