Sunday, January 16, 2011

Why do passwords and ACL entries change within IIS 6.0 MetaBase.xml?

I am attempting to monitor changes to IIS server configuration with TripWire, and have noticed the IIS 6.0 MetaBase.xml file is frequently changed. I understand that IIS frequently backs up the MetaBase, but why would values for the various ACL and password entries change with each revision?

The values that change:
AdminACL
AnonymousUserPass
LogOdbcPassword
WAMUserPass
UNCPassword

New revisions are triggered by simply opening iis.msc, even though none of the settings are changed.

0 comments:

Post a Comment