all groups > iis security > april 2004 >
You're in the

iis security

group:

IIS ADMIN


IIS ADMIN JD
4/29/2004 5:59:28 PM
iis security:
If I want to grant someone access to a website via the IIS snap in do I have
to make the user an administrator? I would like a certain user to have the
ability to modify pages on the website just like the admin can.

Thanks,

JD

Re: IIS ADMIN Jonathan Maltz [MS-MVP]
4/29/2004 8:44:02 PM
Hi,

Not at all - if you give the user modify privileges then they can modify,
they don't need to be Admins

--
--Jonathan Maltz [Microsoft MVP - Windows Server, Virtual PC]
http://www.visualwin.com - A Windows Server 2003 visual, step-by-step
tutorial site :-)
http://vpc.visualwin.com - Does <insert OS name> work on VPC 2004? Find out
here
Only reply by newsgroup. I do not do technical support via email. Any
emails I have not authorized are deleted before I see them.


[quoted text, click to view]

Re: IIS ADMIN JD
4/29/2004 8:56:14 PM
This is for a developer who will need to make modifications to the website
via IIS. The developer is making com components on the server. I would like
to restrict what the user does instead of letting them have free for all on
the server.

JD

[quoted text, click to view]

Re: IIS ADMIN JD
4/29/2004 10:30:07 PM
John,

I am going to try this in the morning. By the way thank you so
much. This is just what I am looking for.

YOU ROCK

JD


[quoted text, click to view]

Re: IIS ADMIN John Alderson
4/29/2004 11:16:34 PM
JD,

You don't have to give away the keys to the kingdom to administer IIS. Look
at my IIS Operators instruction set for ideas. You may need to modify the
scope to limit the developer to precisely what is necessary but my framework
should provide you with the roadmap to get there.

http://www.johnalderson.com/IIS/iisoperators.htm

John Alderson

[quoted text, click to view]
Re: IIS ADMIN Roger Abell [MVP]
5/2/2004 9:26:02 AM
You may need to register the components for them however.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCDBA, MCSE W2k3+W2k+Nt4
[quoted text, click to view]

Re: IIS ADMIN John Alderson
5/2/2004 10:44:12 PM
Roger,

They'll be able to register COM components directly if they are given access
to HKEY_CLASSES_ROOT. I've granted my IIS Operators MODIFY at the root.
This is still a bit more access than I would like but situations where I've
used this overall technique have been for dedicated boxes with one customer.
Shared boxes would require perhaps a slightly more stringent approach for
COM modifications such as using CREATOR OWNER at the root. However, given
the alternative of having everyone as Administrator, I still think MODIFY is
not a bad trade.

John Alderson

[quoted text, click to view]
Re: IIS ADMIN Meng
6/2/2004 6:34:34 PM
Can this work for IIS6? Thanks.


[quoted text, click to view]
AddThis Social Bookmark Button