Solved

IIS Manager restriction

Posted on 2006-06-26
2
561 Views
Last Modified: 2013-12-03
I have a web server that I want to keep secured and locked down, however there is 1 user on our web domain that I want to grant access to use IIS manager from her own work station and connect to the webserver.   This user is not an administrator nor do we want the user to have administrative rights.  Can we just grant access to IIS so the user can create, edit, delete websites as they wish, but not have administrative access to the rest of the server?

How can I do this?  I remember it being a sort of local policy or something similar that allows me to lock down who accesses and who can administer the websites on that server, and do this without having them log into the server and launching IIS manager from there.

Thanks
0
Comment
Question by:jpipitone
2 Comments
 
LVL 34

Accepted Solution

by:
Dave_Dietz earned 500 total points
ID: 16988877
Official answer:

Configuration of IIS to allow non-administrative users to administer IIS is unsupported.

However:

326902      ACLs and using MetaACL for metabase ACL permission changes
http://support.microsoft.com/default.aspx?scid=kb;EN-US;326902

Be careful with this - it gives you the ability to hose your Metabase in such ugly ways that recovery is impossible short of replacing the Metabase.  It also allows you to break security of IIS so badly that anyone can do anything to your server.

(I would wait for IIS 7.0 - there are solutions to this very situation.....)

Dave Dietz


 
0
 
LVL 1

Author Comment

by:jpipitone
ID: 16994097
Thank you for your help!! This will help us out a ton...
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Logparser is the smartest tool I have ever used in parsing IIS log files and there are many interesting things I wanted to share with everyone one of the  real-world  scenario from my current project. Let's get started with  scenario - How do w…
Running classic asp applications under Windows Server 2008 R2 (x64) and IIS 7 is not as easy as one may think. It took me a while to figure it out while getting error 8002801d a few times. After you install the OS you will need to install the fol…
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now