| DisplayName | Description | ID | Type | Isolation | Accessibility | RunAs |
| AppCmd write action | This write action executes an AppCmd command in Windows Server 2012 | Microsoft.Windows.InternetInformationServices.6.2.AppCmd.WriteAction | WriteActionModuleType | Any | Internal | System.PrivilegedMonitoringAccount |
| Control service write action | This write action executes NET.EXE commands in Windows Server 2012 | Microsoft.Windows.InternetInformationServices.6.2.ControlService | WriteActionModuleType | Any | Internal | System.PrivilegedMonitoringAccount |
| Reset IIS write action | This write action executes an IIS reset command in Windows Server 2012 | Microsoft.Windows.InternetInformationServices.6.2.IISReset | WriteActionModuleType | Any | Internal | System.PrivilegedMonitoringAccount |
| IIS 8 alert generation write action | This write action handle the alerts generation with description suppression applied in Windows Server 2012 | Microsoft.Windows.Server.IIS.6.2.GenerateAlertAction.SuppressedByDescription | WriteActionModuleType | Any | Internal | |