iis security: We want to allow developers to create and manage Virtual Directories with
Visual studio and Internet Services Manager so they can test their work and
create subwebs. We do not want them to be administrators. Operators rights
in IIS (5) do not allow this.

We believe this can be done by setting acl's in the metabase and some
experimentaion with this shown some promise, but we do not have a complete
picture.

Please let me know how this can be done appropriately.

Thanks,

Hi,

You should be able to edit the permissions of the metabase using MBexplorer.
http://support.microsoft.com/?kbid=840671#8 (IIS 6)

You can also use Metaedit 2.2
Metabase Explorer 1.6 can be downloaded from
http://www.microsoft.com/downloads/details.aspx?FamilyID=56fc92ee-a71a-4c73-b628-ade629c89499&DisplayLang=en.

MetaEdit 2.2 can be downloaded from
http://download.microsoft.com/download/iis50/Utility/5.0/NT45/EN-US/MtaEdt22.exe.

When I have used these in the past, you must add permissions down the
hierarchical tree and not just at the level you require otherwise this will
fail.

Please ensure you backup the Metabase before you make any changes to the
configuration.

For more information please see:

http://support.microsoft.com/?KBID=240225 Description of Adsutil and
MetaEdit Utilities Used to Modify the Metabase

http://support.microsoft.com/default.aspx?scid=kb;en-us;301386&sd=tech How
To Install MetaEdit 2.2 on Windows NT 4.0 or Windows 2000

Cheers,

Gavin

--
This posting is provided "AS IS" with no warranties and confers no rights


[quoted text, click to view]