I am working with a web application that requires the IIS Anonymous User Account (IUSR_machine name) to read a specific key on the registry. Currently I have promoted that account to the power users group. I would like to find a way to create a userwith specific rights to read a registry key to instantiate a COM object without giving the user power user status? Any ideas would be appreciated.
