IIS Server Security - deny a user the ability to create a virtual directory, but still view the IIS MMC?

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > December 2005 > deny a user the ability to create a virtual directory, but still view the IIS MMC?





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author deny a user the ability to create a virtual directory, but still view the IIS MMC?
jeffdrobinson@gmail.com

2005-11-10, 6:03 pm

is there a way to deny certain users the ability to use the Virtual
Directory Creation Wizard?

Miha Pihler [MVP]

2005-11-10, 6:03 pm

Hi,

Only administrators can manage IIS. If user is not local administrator
he/she will not be able to change settings (and view IIS MMC)...

I believe this is supposed to change in next version of IIS...

--
Mike
Microsoft MVP - Windows Security


<jeffdrobinson@gmail.com> wrote in message
news:1131643067.450898.282900@g47g2000cwa.googlegroups.com...
> is there a way to deny certain users the ability to use the Virtual
> Directory Creation Wizard?
>



jeffdrobinson@gmail.com

2005-11-10, 6:03 pm

Hi Mike, thanks for your reply.

Example: i have found that if i use NTFS security on the file
c:\winnt\system32\inetsrv\w3ext.dll and deny a specific user all
priveledges to that file, the "Web Sharing" tab will disappear when
that user views the properties on a folder.

I'm hoping there is a similiar way to prevent the execution of the
"Directory Creation Wizard"

one option that i have found, but it is too restrictive, is to deny
access to the c:\winnt\system32\inetsrv\iisui.dll with NTFS
security...but that prevents the user from opening the IIS MMC at
all...i want the user to be able to open IIS MMC, but i don't want them
to to use the "Directory Creation Wizard"

jeffdrobinson@gmail.com

2005-12-01, 8:55 pm

i never found a way to do this (other than not allowing users to be
local administrators on a server)...so, i settled for a scheduled vbs
script that would email me if a new virtual root is created

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com