TechSOS
asked on
Necessary Permission to Edit IIS 6.0 Settings
I'm trying to grant a user access to make changes to IIS 6.0 without making them an administrator on the machine. There are other services and software on the server that I do not want the user to be able to alter.
My initial plan was to set up the user to remotely edit IIS using the Management snap-in in mmc but I can't seem to find any information on what the minimum required permissions are to make changes to IIS. Does a user HAVE to be an administrator to make IIS changes?
Thanks,
TechSOS
My initial plan was to set up the user to remotely edit IIS using the Management snap-in in mmc but I can't seem to find any information on what the minimum required permissions are to make changes to IIS. Does a user HAVE to be an administrator to make IIS changes?
Thanks,
TechSOS
They need to be local administrators.
ASKER
We have the system set to only allow admins to Remote Desktop. I don't want to make these new users admin because I don't want them to have Remote Desktop access.
Giving them Power User rights still gives me the "You have been denied access to this machine." message.
It does work if I make them administrators... but I'm trying to avoid that.
Are there any specific permissions I could put on say... the IIS executable or anything that might work?
Giving them Power User rights still gives me the "You have been denied access to this machine." message.
It does work if I make them administrators... but I'm trying to avoid that.
Are there any specific permissions I could put on say... the IIS executable or anything that might work?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
It really depends on what you are trying to avoid having them do. Power Users and Server Operators can both administer IIS. Depending on your group policy, you may need to add them to Remote Desktop Users to give them console access, if that is desired. Otherwise, remote MMC will work with those rights.
Best of luck,
harperse