IIS 6 Question: How to Publish from FrontPage 2003 -- iis security

JoeF
8/22/2006 7:32:02 AM

Thank you for taking the time to answer my questions. You have been VERY
helpful!
Please clarify one task for me.
- Make a virtual web normally. Right click and choose "FrontPage 2002
Server
- Extensions - Extend"

- In the resulting managment web page, add or create the user as an
- administrator of the web.

I've already created the site and had the webmaster publish to it since I
joined his user name to the Local Administrators group. Can I still create
avirtual web or change the existing site to a virtual web? FP extensions are
enabled on thecurrent site. - I guess I'm a little confused. Any 'more' help
is appreciated. Thanks again!

-JoeF

[quoted text, click to view]

Funkadyleik Spynwhanker
8/22/2006 2:13:03 PM

[quoted text, click to view]

Make a virtual web normally. Right click and choose "FrontPage 2002 Server
Extensions - Extend"

In the resulting managment web page, add or create the user as an
administrator of the web.

You do _NO_ modifications to file permissions in the root folder, and _NO_
configuration in the Users area on the server for this. The FrontPage
(Sharepoint) administration web site does that for you.

[quoted text, click to view]

No, they'll all be broken. You need to treat DNS separately. I'd suggest
setting up a second hostname www2.whatever.com and publishing to that.
Then, when you are satisfied the site has been moved and is operating
correctly, you switch DNS to send traffic to the new location. That avoids
down time and gives you the luxury of figuring stuff out on your own time
without a webmaster complaining the site is broken.

[quoted text, click to view]

Yes, you can do that, but you probably don't want your webmaster editing
later with it, so you need a site administrator account anyway.

[quoted text, click to view]

None, you don't. See above.

[quoted text, click to view]

Patch patch patch patch and patch. Other depends on exactly what you are
doing.

[quoted text, click to view]

Yes. Once you have the FP site configured completely you can let them do
it. (I would advise that, as they probably have more experience at it.)

[quoted text, click to view]

Windows does cluster server for that, or there are third party apps to do
it.

Funkadyleik Spynwhanker
8/22/2006 9:04:15 PM

Virtual web = Thingie on the server you can see in IIS, as opposed to a
folder with web site files in it "a web". It's a collection of settings on
the server that tell the server to respond to certain traffic using the
hostname, what folder the files are in, if it requires a user/pass, etc.

If you already published, you have one set up already.

Same with the server extensions. They are administered via a set of web
pages and scripts that get installed with IIS. You access them via a
browser program while sitting in front of the server, or in the case of
specific web settings you can use a link across the internet. You open all
this up by right clicking on the virtual web in the MMC, or by using a
shortcut that exists in your "Administrative Options" in "Control Panel".
(Again, while sitting in front of the server or otherwise accessing the
screen.)

You were set up to make it a comlicated process involveing messing around
with users, permissions, folder trees, etc. when it isn't that complicated
(and would be prone to error if it was done manually.) Basically, you make
a web site, "extend" it with FP. Thats it. The "extending" process
includes creating a user to edit the site which is NOT an administrator on
anything but the web site. (They wouldn't be able to log into your server
and format the hard drive, for example.)

But it sounds like you got to where you need.

[quoted text, click to view]

Roger Abell [MVP]
8/23/2006 8:38:44 PM

Hi Joe,

I am going to differ a little on this.
I never give out FrontPage level "administrator" to web content owners,
instead at most giving "advanced author" role. The "administrator" role
does enable them to do some things, like "server health", and defining
new machine local user accounts for use with their web/website.

All that you need to do, at a minimum, is to
a) define a new website, or a new web vdir in an existing site
b) extend that with the FP server extensions
c) define a normal, limited account for use by the owner
d) use the Sharepoint Admin pages, or via the Administer link
on the page you are left on after extending, to grant Advanced
Author to the account defined for use with the web or site root web
This can also take the form
a) define new website in IIS if this is new entire site, not just new
web in existing site.
b) browse to the Sharepoint administration website
c) if this in new site, select to extend the site
else
c) if this is a new web in existing site, select to administer that site,
and on the site's admin page click to add new web
d) access the Sharepoint admin page for the new site or web and
set grant of Advanced Author role to Windows limited account
that will be owner/publisher

Much depends on what you mean by a public internet webserver
If you are looking at hosting webs for diverse owners, be aware that
a standard install of FP server extensions will NOT help you to keep
one web/website owner from reading source of another, even if you
use different app pools configured to use different accounts. Further,
if you go to the work of making sure there is such segmentation, which
is not easy to do, then a FP extended web owner with the FP role of
Administrator can destroy that separation by simply triggering some of
the server health functions.

Roger

[quoted text, click to view]

JAMOS
8/24/2006 8:50:02 AM

Hi,

You can use MS Application Center 2000 for load balancing and other admin
functions such as application pool admin and monitoring. I can supply more
info if needed.
--
CHEERS,
JAMOS

[quoted text, click to view]

Got something to say? Click here to post a reply to this thread.

Don't see what you're looking for? Try a search.

View other messages about iis security

iis security : IIS 6 Question: How to Publish from FrontPage 2003