| DisplayName | Description | ID | Type | Isolation | Accessibility | RunAs |
| AppCmd write action | This write action executes an AppCmd command in Windows Server 2016 | Microsoft.Windows.InternetInformationServices.10.0.AppCmd.WriteAction | WriteActionModuleType | Any | Internal | System.PrivilegedMonitoringAccount |
| Control service write action | This write action executes NET.EXE commands in Windows Server 2016 | Microsoft.Windows.InternetInformationServices.10.0.ControlService | WriteActionModuleType | Any | Internal | System.PrivilegedMonitoringAccount |
| Reset IIS write action | This write action executes an IIS reset command in Windows Server 2016 | Microsoft.Windows.InternetInformationServices.10.0.IISReset | WriteActionModuleType | Any | Internal | System.PrivilegedMonitoringAccount |
| IIS 10 alert generation write action | This write action handle the alerts generation with description suppression applied in Windows Server 2016 | Microsoft.Windows.Server.IIS.10.0.GenerateAlertAction.SuppressedByDescription | WriteActionModuleType | Any | Internal | |