all groups > iis security > august 2005 >
You're in the

iis security

group:

IIS 6.0 Administration for non-admin users



IIS 6.0 Administration for non-admin users Bill Green
8/31/2005 10:49:14 AM
iis security: Hi,

This is probably going to sound like a stupid question, but I'm
stumped.

I am running IIS 6.0 on Windows 2003 Server. In the past, when our web
developers needed to create or edit websites, I would simply sit with
them, log on remotely and create any files, foldrs or virtual
directories that they required. However, this is not really a tenable
situation any longer and, of course, for security reasons I cannot
simply give them admin rights or the password to the admin account.

I have created an account for them to logon remotely to the webserver,
however, they do not have the proper rights to use the IIS management
console. Is there a way to provide users without admin rights the
ability to use IIS to create, edit and manage websites either from a
remote desktop connection or simply from their desktop? I have to
imagine that there is, as generally in organizations I've seen keep web
development and systems administration seperate.

What key am I missing? Seems like the Operator's Tab in IIS 5.0 would
allow me to delegate this kind of privledge, but I'm stumped in IIS
Re: IIS 6.0 Administration for non-admin users Miha Pihler [MVP]
9/1/2005 8:57:58 PM
Hi,

Sorry, but only administrators are able to manage IIS (you can't delegate
this task to users who are not administrators). This is one feature that was
also requested in new IIS (IIS 7).

Web Site Operator Capabilities and Limitations
http://support.microsoft.com/default.aspx?scid=KB;EN-US;298969

--
Mike
Microsoft MVP - Windows Security


[quoted text, click to view]

Re: IIS 6.0 Administration for non-admin users P C
9/1/2005 11:01:40 PM
If IIS has FPSE installed and the users use FP to mage thier sites you
can add them as FP web admins or auther to mage theri own site. The FP
webadmin can evne creat FP subwebs with is own FP security users for the
subweb.

...PC

[quoted text, click to view]
Re: IIS 6.0 Administration for non-admin users David Wang [Msft]
9/3/2005 12:14:19 AM
Unfortunately, IIS configuration does not support delegation intrinsically,
so we had to remove the Operators tab in IIS6 for security reasons.

Other folks have built various control panel web applications to offer this
sort of ability. They mostly all depend on a single powerful user that can
do anything on the IIS server, and the the web application control which
authenticated user has the authorization to use the powers of that user to
reconfigure IIS.

FrontPage Server Extensions and Sharepoint Server offer some of the same
abilities as well.

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
[quoted text, click to view]
Hi,

This is probably going to sound like a stupid question, but I'm
stumped.

I am running IIS 6.0 on Windows 2003 Server. In the past, when our web
developers needed to create or edit websites, I would simply sit with
them, log on remotely and create any files, foldrs or virtual
directories that they required. However, this is not really a tenable
situation any longer and, of course, for security reasons I cannot
simply give them admin rights or the password to the admin account.

I have created an account for them to logon remotely to the webserver,
however, they do not have the proper rights to use the IIS management
console. Is there a way to provide users without admin rights the
ability to use IIS to create, edit and manage websites either from a
remote desktop connection or simply from their desktop? I have to
imagine that there is, as generally in organizations I've seen keep web
development and systems administration seperate.

What key am I missing? Seems like the Operator's Tab in IIS 5.0 would
allow me to delegate this kind of privledge, but I'm stumped in IIS
6.0. Any help would be appreciated.

Re: IIS 6.0 Administration for non-admin users Bernard Cheah [MVP]
9/6/2005 12:00:00 AM
Do it at your own risk :)
http://msmvps.com/bernard/archive/2005/05/08/46074.aspx


--
Regards,
Bernard Cheah
http://www.iis-resources.com/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/


[quoted text, click to view]

AddThis Social Bookmark Button