Error message when you use a CGI application that uses IIS 5.0: "A Required privilege is not held by the client" (922737)


The information in this article applies to:

  • Microsoft Internet Information Services 5.0

SYMPTOMS

When you use a Common Gateway Interface (CGI) application that uses Microsoft Internet Information Services (IIS) 5.0, you receive the following error message:
A Required privilege is not held by the client

CAUSE

By default, the Local System account identity and the logon identity of the IIS Admin Service and its dependent services are the same when IIS is installed. When you test or debug the CGI application, the logon identity of the IIS Admin Service may change to the current user account. This change is valid for testing. However, because IIS depends on the Local System account for additional functions, you must make sure that the Local System and the IIS Admin Service logon identities are the same after you finish testing or debugging the CGI application.

WORKAROUND

To work around this problem, make sure that the user account has the following rights:
  • Replace a process level token
  • Act as a part of the operating system
  • Generate security audits
To do this, follow these steps:
  1. Log on to the computer that is running IIS by using an account that has administrative permissions.
  2. Click Start, click Run, type secpol.msc, and then click OK.
  3. In the Local Security Settings Microsoft Management Console (MMC) snap-in, expand Local Policies, and then click User Rights Assignment.
  4. In the results pane, right-click Replace a process level token.
  5. In the Replace a process level token Properties dialog box, click Add User or Group.
  6. In the Select Users or Groups dialog box, type the name of the user account, click Check Names to verify the account, and then click OK.
  7. Repeat steps 4 through 6 for the Act as a part of the operating system and Generate security audits user rights.
  8. Click Start, point to Administrative Tools, and then click Internet Information Services (IIS) Manager.
  9. In the Internet Information Services (IIS) Manager MMC snap-in, right-click the name of the server that is running IIS, point to All Tasks, and then click Restart IIS.
Modification Type:MajorLast Reviewed:8/7/2006
Keywords:kbprb KB922737 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.