Solved

IIS Manager restriction

Posted on 2006-06-26
2
558 Views
Last Modified: 2013-12-03
I have a web server that I want to keep secured and locked down, however there is 1 user on our web domain that I want to grant access to use IIS manager from her own work station and connect to the webserver.   This user is not an administrator nor do we want the user to have administrative rights.  Can we just grant access to IIS so the user can create, edit, delete websites as they wish, but not have administrative access to the rest of the server?

How can I do this?  I remember it being a sort of local policy or something similar that allows me to lock down who accesses and who can administer the websites on that server, and do this without having them log into the server and launching IIS manager from there.

Thanks
0
Comment
Question by:jpipitone
2 Comments
 
LVL 34

Accepted Solution

by:
Dave_Dietz earned 500 total points
ID: 16988877
Official answer:

Configuration of IIS to allow non-administrative users to administer IIS is unsupported.

However:

326902      ACLs and using MetaACL for metabase ACL permission changes
http://support.microsoft.com/default.aspx?scid=kb;EN-US;326902

Be careful with this - it gives you the ability to hose your Metabase in such ugly ways that recovery is impossible short of replacing the Metabase.  It also allows you to break security of IIS so badly that anyone can do anything to your server.

(I would wait for IIS 7.0 - there are solutions to this very situation.....)

Dave Dietz


 
0
 
LVL 1

Author Comment

by:jpipitone
ID: 16994097
Thank you for your help!! This will help us out a ton...
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Running classic asp applications under Windows Server 2008 R2 (x64) and IIS 7 is not as easy as one may think. It took me a while to figure it out while getting error 8002801d a few times. After you install the OS you will need to install the fol…
When it comes to showing a 404 error page to your visitors, you do not want that generic page to show, and you especially do not want your hosting provider’s ad error page to show either. In this article, I will show you how to enable the custom 40…
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now