IIS Server Security - [IIS6] Cannot Access IIS Metabase Through IIS Admin Objects

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > July 2005 > [IIS6] Cannot Access IIS Metabase Through IIS Admin Objects





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author [IIS6] Cannot Access IIS Metabase Through IIS Admin Objects
Will Mays

2005-07-05, 5:56 pm

Hi,

I am currently in the process of upgrading a Windows 2000 web server to
windows 2003 ...

The developer has created a staging system that transfers the website
between a development and production server, and then switches the home
directory of the website on the production machine - in effect creating a
instant transfer to the new version of the site.

However ...

Under Windows 2003 / IIS 6, The staging system fails when trying to read
properties from the metabase.

objMetabase = getObject("IIS://DEVEL/W3SVC")

This returns the error code '70 - Permission denied'
Adding the user invoking the script to the local administrators group fixes
the problem. This, however, seems to be a bad move security wise ... the less
users with admin rights the better!
Q285286 shows that (at least for IIS 4 and 5) the only way around this is to
add the user to the local admin group - it does not mention IIS 6 in the
applicability list.

Out of this, 2 questions:
- Has this KB article been revised / re-released for IIS 6?
- Is there a more secure way of getting this to work (preferably without
modifying the code)?
--
Regards,
Will Mays
Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com