Solved

IIS Manager restriction

Posted on 2006-06-26
2
562 Views
Last Modified: 2013-12-03
I have a web server that I want to keep secured and locked down, however there is 1 user on our web domain that I want to grant access to use IIS manager from her own work station and connect to the webserver.   This user is not an administrator nor do we want the user to have administrative rights.  Can we just grant access to IIS so the user can create, edit, delete websites as they wish, but not have administrative access to the rest of the server?

How can I do this?  I remember it being a sort of local policy or something similar that allows me to lock down who accesses and who can administer the websites on that server, and do this without having them log into the server and launching IIS manager from there.

Thanks
0
Comment
Question by:jpipitone
2 Comments
 
LVL 34

Accepted Solution

by:
Dave_Dietz earned 500 total points
ID: 16988877
Official answer:

Configuration of IIS to allow non-administrative users to administer IIS is unsupported.

However:

326902      ACLs and using MetaACL for metabase ACL permission changes
http://support.microsoft.com/default.aspx?scid=kb;EN-US;326902

Be careful with this - it gives you the ability to hose your Metabase in such ugly ways that recovery is impossible short of replacing the Metabase.  It also allows you to break security of IIS so badly that anyone can do anything to your server.

(I would wait for IIS 7.0 - there are solutions to this very situation.....)

Dave Dietz


 
0
 
LVL 1

Author Comment

by:jpipitone
ID: 16994097
Thank you for your help!! This will help us out a ton...
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Logparser is the smartest tool I have ever used in parsing IIS log files and there are many interesting things I wanted to share with everyone one of the  real-world  scenario from my current project. Let's get started with  scenario - How do w…
What is an ISAPI filter?   •      It's an assembly (.dll file) that can add or change the way IIS works.   •      They can be enabled globally for your web server or on a site-by-site basis.   When the IIS server receives a request, enabling the ISAPI fi…
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…

803 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question