IIS Server Security - How to allow non-admins to create and manage Virtual Directories?

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > January 2005 > How to allow non-admins to create and manage Virtual Directories?





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author How to allow non-admins to create and manage Virtual Directories?
BB

2005-01-20, 5:57 pm

We want to allow developers to create and manage Virtual Directories with
Visual studio and Internet Services Manager so they can test their work and
create subwebs. We do not want them to be administrators. Operators rights
in IIS (5) do not allow this.

We believe this can be done by setting acl's in the metabase and some
experimentaion with this shown some promise, but we do not have a complete
picture.

Please let me know how this can be done appropriately.

Thanks,

-b
Gavin Gee [MSFT]

2005-01-31, 7:51 am

Hi,

You should be able to edit the permissions of the metabase using MBexplorer.
http://support.microsoft.com/?kbid=840671#8 (IIS 6)

You can also use Metaedit 2.2
Metabase Explorer 1.6 can be downloaded from
http://www.microsoft.com/downloads/...DisplayLang=en.

MetaEdit 2.2 can be downloaded from
http://download.microsoft.com/downl...S/MtaEdt22.exe.

When I have used these in the past, you must add permissions down the
hierarchical tree and not just at the level you require otherwise this will
fail.

Please ensure you backup the Metabase before you make any changes to the
configuration.

For more information please see:

http://support.microsoft.com/?KBID=240225 Description of Adsutil and
MetaEdit Utilities Used to Modify the Metabase

http://support.microsoft.com/defaul...;301386&sd=tech How
To Install MetaEdit 2.2 on Windows NT 4.0 or Windows 2000

Cheers,

Gavin

--
This posting is provided "AS IS" with no warranties and confers no rights


"BB" <BB@discussions.microsoft.com> wrote in message
news:A1784E2F-7F2A-41B9-BD5D-C65BE39C2C18@microsoft.com...
> We want to allow developers to create and manage Virtual Directories with
> Visual studio and Internet Services Manager so they can test their work
> and
> create subwebs. We do not want them to be administrators. Operators
> rights
> in IIS (5) do not allow this.
>
> We believe this can be done by setting acl's in the metabase and some
> experimentaion with this shown some promise, but we do not have a complete
> picture.
>
> Please let me know how this can be done appropriately.
>
> Thanks,
>
> -b



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com