AdminACL

The AdminACL property contains a Windows discretionary access control list (DACL) that controls access to any metabase key. This property grants read access, restricted write access, or unrestricted write access. For information about the possible values that can be set for this property, see the Values table.

Values

This table contains a list of possible values for AdminACL:

Constant

Value

Description

MD_ACR_READ

0x00000001

Enable read access to all properties.

MD_ACR_WRITE

0x00000002

Enable write access to all properties.

MD_ACR_ENUM_KEYS

0x00000008

Enable key enumeration.

MD_ACR_RESTRICTED_WRITE

0x00000020

See Remarks, following this table.

MD_ACR_UNSECURE_PROPS_READ

0x00000080

Enable read access to properties that do not have the METADATA_SECURE attribute set.

MD_ACR_WRITE_DAC

0x00040000

Enable write access to AdminACL for security descriptor creator.

Schema Attributes

Attribute Name

Value

ADSI/WMI Data Type

NTACL

ABO Data Type

BINARY_METADATA

Schema Default

null

Internal Default

Not specified.

Upper Bound

Not specified

Lower Bound

Not specified

Internal ID

6027

Friendly ID

MD_ADMIN_ACL

Property Attributes

INHERIT | SECURE | REFERENCE

User Type

IIS_MD_UT_SERVER

Configurable Locations

You can configure this property at the following locations in the IIS metabase.

Metabase Path

IIS Admin Object Type

/LM

IIsComputer

/LM/W3SVC

IIsWebService

/LM/MSFTPSVC

IIsFtpService

/LM/W3SVC/n

IIsWebServer

/LM/MSFTPSVC/n

IIsFtpServer

/LM/W3SVC/n/ROOT/file_name

/LM/W3SVC/n/ROOT/virtual_directory_name/file_name

IIsWebFile

/LM/W3SVC/n/ROOT/physical_directory_name

/LM/W3SVC/n/virtual_directory_name/physical_directory_name

IIsWebDirectory

/LM/W3SVC/n/ROOT

/LM/W3SVC/n/ROOT/virtual_directory_name

IIsWebVirtualDir

/LM/MSFTPSVC/n/ROOT

/LM/MSFTPSVC/n/ROOT/virtual_directory_name

IIsFtpVirtualDir

/LM/W3SVC/Filters/filter_name

/LM/W3SVC/n/Filters/filter_name

IIsFilter

/LM/W3SVC/Filters

/LM/W3SVC/n/Filters

IIsFilters

/LM/W3SVC/Filters/Compression/gzip

/LM/W3SVC/Filters/Compression/deflate

IIsCompressionScheme

/LM/W3SVC/Filters/Compression/Parameters

IIsCompressionSchemes

/LM/W3SVC/n/IIsCertMapper

IIsCertMapper

/LM/MimeMap

IIsMimeMap

/LM/logging

IIsLogModules

/LM/logging/Microsoft IIS Log File Format

/LM/logging/NCSA Common Log File Format

/LM/logging/ODBC Logging

/LM/logging/W3C Extended Log File Format

IIsLogModule

/LM/logging/Custom Logging

/LM/logging/Custom Logging/Date

/LM/logging/Custom Logging/Time

/LM/logging/Custom Logging/Extended Properties

/LM/logging/Custom Logging/Extended Properties/extended_property_name

IIsCustomLogModule

/LM/W3SVC/Info

IIsWebInfo

/LM/MSFTPSVC/Info

IIsFtpInfo

/LM/NNTPSVC

IIsNntpService

/LM/NNTPSVC/n

IIsNntpServer

/LM/NNTPSVC/n/ROOT

/LM/NNTPSVC/n/ROOT/virtual_directory_name

IIsNntpVirtualDir

/LM/NNTPSVC/Info

IIsNntpInfo

/LM/SMTPSVC

IIsSmtpService

/LM/SMTPSVC/n

IIsSmtpServer

/LM/SMTPSVC/n/ROOT

/LM/SMTPSVC/n/ROOT/virtual_directory_name

IIsSmtpVirtualDir

/LM/SMTPSVC/n/Domain

IIsSmtpDomain

/LM/SMTPSVC/n/RoutingSources

IIsSmtpRoutingSource

/LM/SMTPSVC/Info

IIsSmtpInfo

/LM/NNTPSVC/n/Rebuild

IIsNntpRebuild

/LM/NNTPSVC/n/Sessions

IIsNntpSessions

/LM/NNTPSVC/n/Feeds

IIsNntpFeeds

/LM/NNTPSVC/n/Feeds/feed n

IIsNntpFeed

/LM/NNTPSVC/n/Expires

IIsNntpExpiration

/LM/NNTPSVC/n/Expires/expire n

IIsNntpExpire

/LM/NNTPSVC/n/Groups

IIsNntpGroups

/LM/SMTPSVC/n/Sessions

IIsSmtpSessions

/

IIS_ROOT

/LM/SMTPSVC/n/Alias

IIsSmtpAlias

/LM/SMTPSVC/n/DL

IIsSmtpDL

/LM/SMTPSVC/n/User

IIsSmtpUser

/LM/W3SVC/AppPools/application_pool_name

IIsApplicationPool

/LM/W3SVC/AppPools

IIsApplicationPools

Flags

There are no flags for this property.

Requirements

Client: Requires Windows XP Professional, Windows 2000 Professional, or Windows NT Workstation 4.0.

Server: Requires Windows Server 2003, Windows 2000 Server, or Windows NT Server 4.0.

Product: IIS

See Also