[This is preliminary documentation and subject to change]

### AdminACL

The AdminACL property contains a Microsoft Windows discretionary access control list (DACL) that can be used to control access to any metabase subtree. This property can be used to grant read access, restricted write access, or unrestricted write access.

Bitmask Values

Constant | Value | Description
MD_ACR_READ | 0x00000001 | Enable read access to all properties.
MD_ACR_WRITE | 0x00000002 | Enable write access to all properties.
MD_ACR_ENUM_KEYS | 0x00000008 | Enable key enumeration.
MD_ACR_RESTRICTED_WRITE | 0x00000020 | See Remarks, following this table.
MD_ACR_UNSECURE_PROPS_READ | 0x00000080 | Enable read access to properties that do not have the METADATA_SECURE attribute set.
MD_ACR_WRITE_DAC | 0x00040000 | Enable write access to AdminACL for security descriptor creator.

Remarks

MD_ACR_RESTRICTED_WRITE enables write access to the following properties:

AdminACL | AppIsolated
Path | AccessFlags
AnonymousUserName | AnonymousUserPass
MaxBandwidth | MaxBandwidthBlocked
SecureBindings | ServerBindings

Attribute Name | Attribute Value
Data Type | NTACL
Attributes | INHERIT | SECURE | REFERENCE
Default Value | null
MetaFlagsEx | CACHE_PROPERTY_MODIFIED
User Type | IIS_MD_UT_SERVER
StartingNumber |
EndingNumber |
ID | 6027

### Access Locations

This property is accessible at the following locations:

Metabase Path | IIS Admin Object Type
/LM/MSFTPSVC/Info | IIsFtpInfo
/LM/MSFTPSVC/1 | IIsFtpServer
/LM/MSFTPSVC/Info/Templates/Public FTP Site | IIsFtpServer
/LM/MSFTPSVC | IIsFtpService
/LM/Logging | IIsLogModules
/LM/NNTPSVC/1 | IIsNntpServer
/LM/NNTPSVC | IIsNntpService
/LM/W3SVC/Info | IIsWebInfo
/LM/W3SVC/1 | IIsWebServer
/LM/W3SVC/2 | IIsWebServer
/LM/W3SVC/Info/Templates/Public Web Site | IIsWebServer
/LM/W3SVC/Info/Templates/Secure Web Site | IIsWebServer
/LM/W3SVC | IIsWebService

### IIS Admin Base Object Information

The following table lists additional information required only for code that uses the IIS Admin Base Object.

Metabase identifier | MD_ADMIN_ACL
Data type | NTACL
User type | IIS_MD_UT_SERVER

© 1997-2001 Microsoft Corporation. All rights reserved.