Datasheet

Running aspnet_regiis with the ga switch ensures that the ACLs for a variety of ASP.NET directories
(remember the Temporary ASP.NET Files directory discussed earlier?) as well as ACLs in the IIS
metabase are configured properly to grant access to the desired user account. Another side effect of
using the
ga switch though is that ASP.NET will create an AutoGenKeys Registry key at the following
Registry location:
HKLM\SOFTWARE\Microsoft\ASP.NET\2.0.50727.0\AutoGenKeys
Underneath the AutoGenKeys key, the utility creates an additional key for the SID that corresponds to
the user account that is currently being configured with the
ga switch. This additional key will grant
read and write access to the user account. As an example, Figure 1-8 shows the Registry location where
AutoGenKeys has already been created. The only SIDs currently displayed in Figure 1-8 correspond to
LOCAL SERVICE and NETWORK SERVICE and respectively. However, because the user profiles can be
loaded for both of these accounts, no key information has been stored in the Registry.
Figure 1-8
22
Chapter 1
04_596985 ch01.qxp 12/14/05 7:46 PM Page 22