Can't get site list in Win2008 x64 R2 - "appcmd list site" failed - insufficient permissions

Can't get site list in Win2008 x64 R2 from user "testuser" which is the member of Administrators and IIS_IUSRS groups.

What I missed here? Below is the error I got on standard "appcmd" command

C:\Windows\System32\inetsrv>appcmd list site
ERROR ( message:Configuration error
Filename: redirection.config
Line Number: 0
Description: Cannot read configuration file due to insufficient permissions
. )

Please advice.
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Do you have UAC on? If so, start the prompt as an administrator.
longjumpsAuthor Commented:
Yes I have UAC, but the purpose of the task is to have regular user with
Administrators and IIS_IUSRS groups membership to run this command:

appcmd list site

without errors.
So the question is how to make it happen not from user "Adminitrator", but regular user adding him relevant groups and permissions?

Please advice.
What I mean is that your regular user needs to elevate his/her privilege level to administator when starting the cmd.exe. This is done by "run as administrator" by using the regular account, not the "Administrator" user account.

When UAC is on, it does not matter if you are member of any such group. If you don't elevate, member of the Administrators group does not have admin privileges.
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

longjumpsAuthor Commented:
To my understanding user from Administrators group can do anything he wants.
But why not getting IIS information like list of sites??

Please advice.
No, if UAC is on and the user is not elevated. That is the whole purpose of UAC: not allow administrative access to the system unless the admin specifically allows it.

Disable UAC completely and try again to see the difference.

If IIS config information is meant for administrators only and the user is not elevated, he/she can't access it.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
longjumpsAuthor Commented:

Can you please explain the following.

I made login as user from Administrators group.
Can run Server Manager, see and do what I want with sites in Server Manager,
but once run from command line "appcmd list sites" fails, WHY?

See attached picture
 user admin grou can SM but not appcmd
To run as administrator:

 Run as administrator
Your prompt should have text "Administrator:" in the header:

 Administrator prompt
longjumpsAuthor Commented:
yes I know this "Run as ..."

BTW: once I did it from user in Administrators group password wasn't required now.
However why I can run this command from any user from Administrators group?
longjumpsAuthor Commented:
not exact.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft IIS Web Server

From novice to tech pro — start learning today.