Solved

Necessary Permission to Edit IIS 6.0 Settings

Posted on 2009-04-14
5
644 Views
Last Modified: 2012-06-21
I'm trying to grant a user access to make changes to IIS 6.0 without making them an administrator on the machine. There are other services and software on the server that I do not want the user to be able to alter.

My initial plan was to set up the user to remotely edit IIS using the Management snap-in in mmc but I can't seem to find any information on what the minimum required permissions are to make changes to IIS. Does a user HAVE to be an administrator to make IIS changes?

Thanks,
TechSOS
0
Comment
Question by:TechSOS
  • 2
5 Comments
 
LVL 10

Expert Comment

by:harperse
ID: 24148298
TechSOS,

It really depends on what you are trying to avoid having them do.  Power Users and Server Operators can both administer IIS.  Depending on your group policy, you may need to add them to Remote Desktop Users to give them console access, if that is desired.  Otherwise, remote MMC will work with those rights.

Best of luck,
harperse
0
 
LVL 51

Expert Comment

by:Ted Bouskill
ID: 24154509
They need to be local administrators.
0
 

Author Comment

by:TechSOS
ID: 24167303
We have the system set to only allow admins to Remote Desktop. I don't want to make these new users admin because I don't want them to have Remote Desktop access.

Giving them Power User rights still gives me the "You have been denied access to this machine." message.

It does work if I make them administrators... but I'm trying to avoid that.

Are there any specific permissions I could put on say... the IIS executable or anything that might work?
0
 
LVL 51

Accepted Solution

by:
Ted Bouskill earned 500 total points
ID: 24171247
No.  This question has been asked many times on this site.  The answer is always, "They must be local administrators"  It's too protect the OS.  A badly configured web application is as dangerous as giving them full remote access.  If you don't trust them to use remote desktop then you shouldn't trust them to change IIS.
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

What is an ISAPI filter?   •      It's an assembly (.dll file) that can add or change the way IIS works.   •      They can be enabled globally for your web server or on a site-by-site basis.   When the IIS server receives a request, enabling the ISAPI fi…
As tax season makes its return, so does the increase in cyber crime and tax refund phishing that comes with it
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
In this video I am going to show you how to back up and restore Office 365 mailboxes using CodeTwo Backup for Office 365. Learn more about the tool used in this video here: http://www.codetwo.com/backup-for-office-365/ (http://www.codetwo.com/ba…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now