Solved

Necessary Permission to Edit IIS 6.0 Settings

Posted on 2009-04-14
5
623 Views
Last Modified: 2012-06-21
I'm trying to grant a user access to make changes to IIS 6.0 without making them an administrator on the machine. There are other services and software on the server that I do not want the user to be able to alter.

My initial plan was to set up the user to remotely edit IIS using the Management snap-in in mmc but I can't seem to find any information on what the minimum required permissions are to make changes to IIS. Does a user HAVE to be an administrator to make IIS changes?

Thanks,
TechSOS
0
Comment
Question by:TechSOS
  • 2
5 Comments
 
LVL 10

Expert Comment

by:harperse
Comment Utility
TechSOS,

It really depends on what you are trying to avoid having them do.  Power Users and Server Operators can both administer IIS.  Depending on your group policy, you may need to add them to Remote Desktop Users to give them console access, if that is desired.  Otherwise, remote MMC will work with those rights.

Best of luck,
harperse
0
 
LVL 51

Expert Comment

by:tedbilly
Comment Utility
They need to be local administrators.
0
 

Author Comment

by:TechSOS
Comment Utility
We have the system set to only allow admins to Remote Desktop. I don't want to make these new users admin because I don't want them to have Remote Desktop access.

Giving them Power User rights still gives me the "You have been denied access to this machine." message.

It does work if I make them administrators... but I'm trying to avoid that.

Are there any specific permissions I could put on say... the IIS executable or anything that might work?
0
 
LVL 51

Accepted Solution

by:
tedbilly earned 500 total points
Comment Utility
No.  This question has been asked many times on this site.  The answer is always, "They must be local administrators"  It's too protect the OS.  A badly configured web application is as dangerous as giving them full remote access.  If you don't trust them to use remote desktop then you shouldn't trust them to change IIS.
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Join & Write a Comment

Here are the symptoms: You start receiving calls from users that one of your legacy web apps isn't coming up, so you log into your IIS 5 server to check it out.  When you pull up the services, you notice that the WWW Publishing service isn't runn…
Running classic asp applications under Windows Server 2008 R2 (x64) and IIS 7 is not as easy as one may think. It took me a while to figure it out while getting error 8002801d a few times. After you install the OS you will need to install the fol…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now