IUSR_WIN2K3 needs "Set Key" and "Create Subkey" permission to readregistry?



Jason Viers
07-09-2005, 10:54 PM
I have an IIS ISAPI Extension running as the Internet Guest Account
(IUSR_WIN2K3), and I'm having trouble getting it to read some registry keys.

The RegOpenKeyEx() function is able to open the registry fine, but when
I do a RegQueryValueEx(), it returns "5" (ERROR_ACCESS_DENIED). I've
found that if I assert permissions to "Set Value" and "Create Subkeys",
then I AM able to read the value (even if "Query Value" isn't allowed!).
If I assert everything except "Create Subkeys", it won't work. etc,
etc...

I'm completely baffled by this behavior. This is a test development
win2k3/IIS6 box that doesn't have any major software installed on it.
Any idea what could cause this?

Thanks
Jason


IUSR_WIN2K3 needs "Set Key" and "Create Subkey" permission to readregistry?