|
Home > Archive > IIS Server Security > December 2005 > deny a user the ability to create a virtual directory, but still view the IIS MMC?
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
deny a user the ability to create a virtual directory, but still view the IIS MMC?
|
|
| jeffdrobinson@gmail.com 2005-11-10, 6:03 pm |
| is there a way to deny certain users the ability to use the Virtual
Directory Creation Wizard?
| |
| Miha Pihler [MVP] 2005-11-10, 6:03 pm |
| Hi,
Only administrators can manage IIS. If user is not local administrator
he/she will not be able to change settings (and view IIS MMC)...
I believe this is supposed to change in next version of IIS...
--
Mike
Microsoft MVP - Windows Security
<jeffdrobinson@gmail.com> wrote in message
news:1131643067.450898.282900@g47g2000cwa.googlegroups.com...
> is there a way to deny certain users the ability to use the Virtual
> Directory Creation Wizard?
>
| |
| jeffdrobinson@gmail.com 2005-11-10, 6:03 pm |
| Hi Mike, thanks for your reply.
Example: i have found that if i use NTFS security on the file
c:\winnt\system32\inetsrv\w3ext.dll and deny a specific user all
priveledges to that file, the "Web Sharing" tab will disappear when
that user views the properties on a folder.
I'm hoping there is a similiar way to prevent the execution of the
"Directory Creation Wizard"
one option that i have found, but it is too restrictive, is to deny
access to the c:\winnt\system32\inetsrv\iisui.dll with NTFS
security...but that prevents the user from opening the IIS MMC at
all...i want the user to be able to open IIS MMC, but i don't want them
to to use the "Directory Creation Wizard"
| |
| jeffdrobinson@gmail.com 2005-12-01, 8:55 pm |
| i never found a way to do this (other than not allowing users to be
local administrators on a server)...so, i settled for a scheduled vbs
script that would email me if a new virtual root is created
|
|
|
|
|