Tuesday, September 13, 2011

Access to the registry key 'Global' is denied

Recently I was getting the error "Access to the registry key 'Global' is denied" in a software program running on server with Windows 2008 R2 SP1.

A quick Google search revealed this article on Stack Overflow describing a problem in IIS with users not having the correct user permissions in the associated application pools of the running application which lead to a similar error. Further searching turned up this article on IIS.net describing Microsoft's changes to IIS 7.5 (running on Windows 2008) where they created a new, less powerful user to run application pools called "ApplicationPoolIdentity".

What's important to note is the previous Application Pool identity user was set to "NetworkService" which had greater permissions than the new user "ApplicationPoolIdentity" which caused the problem "Access to the registry key 'Global' is denied". This problem hasn't occurred to my other Windows 2008 SP2 servers, so maybe it's only a problem for newly installed SP2 or R2 machines.

To fix the problem just switch the Identity of your Application Pool back to NetworkService for the needed applications and that's it.


No comments: