7

The following command:

icacls c:\inetpub\wwwroot\ /grant "IIS AppPool\DefaultAppPool":F

Constantly returns

Invalid parameter "IIS AppPool\DefaultAppPool"

For any app pool name on any folder, I'm running this from powershell as admin.

I'm sure this has worked before?

Any suggestions much appreciated!

Dan

2
  • I am having the same issue, it doesn't seem to matter what apppool i enter. I even tried importing the WebAdministration snapin just to see if it was path related to IIS: Please let me know if you find anything
    – user123808
    Commented Jun 6, 2012 at 19:32
  • Invalid syntax likely due to "bug" in documented example ("Securing Resources" section): iis.net/learn/manage/configuring-security/…
    – Matt Borja
    Commented Nov 2, 2016 at 16:42

1 Answer 1

9

You need to wrap the whole of the grant argument in quotes:

icacls c:\inetpub\wwwroot\ /grant "IIS AppPool\DefaultAppPool:F"
3
  • I don't actually recall what site/server we were having this issue with but this sounds like this would have very likely been the answer and I'll know what to check next time :)
    – DannyT
    Commented Aug 9, 2012 at 14:08
  • Relevant to msdn.microsoft.com/en-us/library/… -- thank you
    – lance
    Commented Feb 4, 2015 at 20:12
  • 1
    For powershell i ended up with & icacls $AppDataPath /t /grant "IIS AppPool\DefaultAppPool:(OI)(CI)F" wanting it to propagate full access to child folders too Commented Sep 13, 2017 at 15:29

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .