• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1434
  • Last Modified:

Can't get site list in Win2008 x64 R2 - "appcmd list site" failed - insufficient permissions

Can't get site list in Win2008 x64 R2 from user "testuser" which is the member of Administrators and IIS_IUSRS groups.

What I missed here? Below is the error I got on standard "appcmd" command

C:\Windows\System32\inetsrv>appcmd list site
ERROR ( message:Configuration error
Filename: redirection.config
Line Number: 0
Description: Cannot read configuration file due to insufficient permissions
. )

Please advice.
0
longjumps
Asked:
longjumps
  • 5
  • 4
3 Solutions
 
ToxaconCommented:
Do you have UAC on? If so, start the prompt as an administrator.
0
 
longjumpsAuthor Commented:
Yes I have UAC, but the purpose of the task is to have regular user with
Administrators and IIS_IUSRS groups membership to run this command:

appcmd list site

without errors.
So the question is how to make it happen not from user "Adminitrator", but regular user adding him relevant groups and permissions?

Please advice.
0
 
ToxaconCommented:
What I mean is that your regular user needs to elevate his/her privilege level to administator when starting the cmd.exe. This is done by "run as administrator" by using the regular account, not the "Administrator" user account.

When UAC is on, it does not matter if you are member of any such group. If you don't elevate, member of the Administrators group does not have admin privileges.
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
longjumpsAuthor Commented:
To my understanding user from Administrators group can do anything he wants.
Isn't?
But why not getting IIS information like list of sites??

Please advice.
0
 
ToxaconCommented:
No, if UAC is on and the user is not elevated. That is the whole purpose of UAC: not allow administrative access to the system unless the admin specifically allows it.

Disable UAC completely and try again to see the difference.

If IIS config information is meant for administrators only and the user is not elevated, he/she can't access it.
0
 
longjumpsAuthor Commented:
Dear,

Can you please explain the following.

I made login as user from Administrators group.
Can run Server Manager, see and do what I want with sites in Server Manager,
but once run from command line "appcmd list sites" fails, WHY?

See attached picture
 user admin grou can SM but not appcmd
0
 
ToxaconCommented:
To run as administrator:

 Run as administrator
Your prompt should have text "Administrator:" in the header:

 Administrator prompt
0
 
longjumpsAuthor Commented:
yes I know this "Run as ..."

BTW: once I did it from user in Administrators group password wasn't required now.
However why I can run this command from any user from Administrators group?
0
 
longjumpsAuthor Commented:
not exact.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

  • 5
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now