To determine the account that the /MessagingManager virtual directory is running under the context of:
- In the Internet Information Services Microsoft Management Console (MMC), right-click the /MessagingManager virtual directory, and then click Properties.
 - On the Virtual Directory tab, make a note of the level that is specified in the Application Protection box.
 
The following table lists the accounts that are used for different levels of IIS application isolation:
| Application Protection | Account Used | 
|---|
| Low(IIS Process) | Determined by the Identity of IIS In-Process Applications COM+ package. | 
| Medium(Pooled) | Determined by the Identity of IIS Out-Of-Process Pooled Applications COM+ package. | 
| High(Isolated) | Determined by the Identity of COM+ package that is created when the virtual directory is marked with an Application Protection level of High(Isolated). | 
To determine the actual Identity that is used by the COM+ packages that are listed in the table:
- Start the Component Services snap-in.
 - Right-click the package that corresponds to the level of application protection, and then click Properties.
 - Click the Identity tab.
 
After you grant the appropriate file-level and registry-level permissions to the appropriate account (or changing this account), you may have to stop and restart IIS to make sure that the permission changes take effect for the /MessagingManager IIS application.
To stop and restart IIS, run the 
iisreset command from the command prompt.