IIS 6 Manager Security Rights (only via administrators group?)

Hi all,

Here is my situation.. I have a user who is just a member of a group
called Developers, he has local admin rights to his workstation, but no
server admin access.. I want him to be able to use the IIS 6 snapin in
XP to administer IIS on a server. So when he goes to add that computer
to his snapin.. naturally it gives him the "denied access to this
machine" error.

Is there some way short of adding him to the administrators group on
that server, that he can have rights to administer certain web sites on
IIS on that server?

Thanks

Kristofer
Sat May 28 05:37:40 CDT 2005

You are correct in that the user needs to be member of the administrators
group to be able to use IIS Manager.

You can however create a cusomized IIS MMC that can be used. See this page
by Bernard Cheah:
http://msmvps.com/bernard/archive/2005/05/08/46074.aspx

You can also develop your own administration tool to do the same.

This page may also give you some more ideas:
http://www.gafvert.info/notes/DelegatedAdministration.htm

Good Luck!

--
Regards,
Kristofer Gafvert (IIS MVP)
www.gafvert.info - My Articles and help
www.ilopia.com


markm75c@msn.com wrote:

> Hi all,
>
> Here is my situation.. I have a user who is just a member of a group
> called Developers, he has local admin rights to his workstation, but no
> server admin access.. I want him to be able to use the IIS 6 snapin in
> XP to administer IIS on a server. So when he goes to add that computer
> to his snapin.. naturally it gives him the "denied access to this
> machine" error.
>
> Is there some way short of adding him to the administrators group on
> that server, that he can have rights to administer certain web sites on
> IIS on that server?
>
> Thanks