Unfortunately, IIS configuration does not support delegation intrinsically,
so we had to remove the Operators tab in IIS6 for security reasons.
Other folks have built various control panel web applications to offer this
sort of ability. They mostly all depend on a single powerful user that can
do anything on the IIS server, and the the web application control which
authenticated user has the authorization to use the powers of that user to
reconfigure IIS.
FrontPage Server Extensions and Sharepoint Server offer some of the same
abilities as well.
--
//David
IIS
http://blogs.msdn.com/David.Wang This posting is provided "AS IS" with no warranties, and confers no rights.
//
[quoted text, click to view] "Bill Green" <BillGreen@discussions.microsoft.com> wrote in message
news:9963A77D-BC1B-4329-A558-E0B6B237014E@microsoft.com...
Hi,
This is probably going to sound like a stupid question, but I'm
stumped.
I am running IIS 6.0 on Windows 2003 Server. In the past, when our web
developers needed to create or edit websites, I would simply sit with
them, log on remotely and create any files, foldrs or virtual
directories that they required. However, this is not really a tenable
situation any longer and, of course, for security reasons I cannot
simply give them admin rights or the password to the admin account.
I have created an account for them to logon remotely to the webserver,
however, they do not have the proper rights to use the IIS management
console. Is there a way to provide users without admin rights the
ability to use IIS to create, edit and manage websites either from a
remote desktop connection or simply from their desktop? I have to
imagine that there is, as generally in organizations I've seen keep web
development and systems administration seperate.
What key am I missing? Seems like the Operator's Tab in IIS 5.0 would
allow me to delegate this kind of privledge, but I'm stumped in IIS
6.0. Any help would be appreciated.