Posted by (JavaScript must be enabled to view this email address) on Thu 06 Aug 2009

We were trying to configure Email Enabled Document Libraries in MOSS 2007 and all was going really well until actually configuring a document library to accept emails. 

Every time I ran the Incoming Email Settings page and clicked OK I was presented with an ACCESS DENIED error from the web service.  Great! Windows 2008 was at it again.  It might be a lot more secure but its not kind to those who have to administer it on a daily basis.

Eventually I tracked down a post which showed I had to use a command CACLS to set permissions on the IIS Metabase - Application Pool accounts have no administrative access over this and the CACLS command is a way to allow the required level of access.

CACLS is deprecated in Windows 2008, instead you should use

ICACLS “%SystemDrive%\Windows\System32\inetsrv\config\applicationHost.config” /grant <domain>\<UserAccount>:(D,WDAC)