iis security: We have an SQA machine set up to do testing of IIS hosted web applications.
It is running Server 2003/SP1, and is joined to a domain, but not a domain
controller.

I need to delegate the following tasks to the SQA group, but would prefer
not to give them full administrative rights on this machine, even with a
local account.

Is there any way to allow them to do the following without being a full
blown administrator?


- Shutdown/restart IIS
- Create/modify virtual directories

Thank you for any info,

Joe

Hi Joe,

There is no existing function available to let non-admin users to perform
the task. Previously we can add user accounts as web sites operators in IIS
5.x to allow them modify IIS web site configurations. Now the function is
considered not secure and is removed. We only support administrators to
perform all the operations in IIS 6.0.

A workd around is you can develop some web based applications to automate
the task(via IIS ADSI or WMI provider). Or you can use some third-party
ones:

http://www.iis-resources.com/modules/mydownloads/singlefile.php?cid=13&lid=3
1

Thanks.

Best regards,

WenJun Zhang
Microsoft Online Partner Support

This posting is provided "AS IS" with no warranties, and confers no rights.