| DisplayName | Description | ID | Type | Isolation | Accessibility | RunAs |
| AppCmd write action | | Microsoft.Windows.InternetInformationServices.2008.AppCmd.WriteAction | WriteActionModuleType | Any | Internal | System.PrivilegedMonitoringAccount |
| Control service write action | | Microsoft.Windows.InternetInformationServices.2008.ControlService | WriteActionModuleType | Any | Internal | System.PrivilegedMonitoringAccount |
| Reset IIS write action | | Microsoft.Windows.InternetInformationServices.2008.IISReset | WriteActionModuleType | Any | Internal | System.PrivilegedMonitoringAccount |
| IIS 7.0 alert generation write action | | Microsoft.Windows.Server.IIS.2008.GenerateAlertAction.SuppressedByDescription | WriteActionModuleType | Any | Internal | |