Solved

IIS Manager restriction

Posted on 2006-06-26
2
563 Views
Last Modified: 2013-12-03
I have a web server that I want to keep secured and locked down, however there is 1 user on our web domain that I want to grant access to use IIS manager from her own work station and connect to the webserver.   This user is not an administrator nor do we want the user to have administrative rights.  Can we just grant access to IIS so the user can create, edit, delete websites as they wish, but not have administrative access to the rest of the server?

How can I do this?  I remember it being a sort of local policy or something similar that allows me to lock down who accesses and who can administer the websites on that server, and do this without having them log into the server and launching IIS manager from there.

Thanks
0
Comment
Question by:jpipitone
2 Comments
 
LVL 34

Accepted Solution

by:
Dave_Dietz earned 500 total points
ID: 16988877
Official answer:

Configuration of IIS to allow non-administrative users to administer IIS is unsupported.

However:

326902      ACLs and using MetaACL for metabase ACL permission changes
http://support.microsoft.com/default.aspx?scid=kb;EN-US;326902

Be careful with this - it gives you the ability to hose your Metabase in such ugly ways that recovery is impossible short of replacing the Metabase.  It also allows you to break security of IIS so badly that anyone can do anything to your server.

(I would wait for IIS 7.0 - there are solutions to this very situation.....)

Dave Dietz


 
0
 
LVL 1

Author Comment

by:jpipitone
ID: 16994097
Thank you for your help!! This will help us out a ton...
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Today I came across an interesting issue that had me pulling my hair out.  I was troubleshooting a new internal web site which uses integrated security instead of anonymous.  When browsing the site from my laptop, I was able to access it with no iss…
What is an ISAPI filter?   •      It's an assembly (.dll file) that can add or change the way IIS works.   •      They can be enabled globally for your web server or on a site-by-site basis.   When the IIS server receives a request, enabling the ISAPI fi…
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question