[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 291
  • Last Modified:

Allow NON-Administrator to create IIS site

Is it possible in 2008 (or 2003) to let developers create an IIS site without them being in the "Local Administrators" group on the Server?

I see in IIS in 2008 how to delegate security on a site once it's created, but why can't I delegate the abilbity to create a site without giving away the whole server?
1 Solution
Brad HoweCommented:
This doesn't exist with delegation either. To achieve this you could create an application that uses DirectoryServices to create the site and then delagate them as the site or applicaiton administrator at the same time.

The issue is to create a site you need to create appPools, and local server directories when using IIS GUI.

The choices are delegating limited IIS7 administration and keeping my domain users from having local administrative privileges or granting admin access.

It is an issue MS is aware of and still working out. I have brought it up a couple of time now.

sorry ;/


Featured Post

Get quick recovery of individual SharePoint items

Free tool – Veeam Explorer for Microsoft SharePoint, enables fast, easy restores of SharePoint sites, documents, libraries and lists — all with no agents to manage and no additional licenses to buy.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now