|
Home > Archive > IIS Server Security > August 2006 > Grant Users Permissions to Modify IIS without Having Full Admin Ri
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Grant Users Permissions to Modify IIS without Having Full Admin Ri
|
|
|
| We have had to revoke Administrator accounts from all users that are not real
'System Administrators'. The problem is that several of these users do web
development and need to go in to IIS to modify settings/restart it, etc. Can
anyone tell me how this can be done without having the users use an SA
account. I did find the tool IIS 6.0 Resource Kit Tools and have downloaded
it, but when I follow the instructions to right click on a node, everything
is grayed out. Anyone have any idea of how this can be done. Thank you.
| |
| Daniel Crichton 2006-08-01, 1:25 pm |
| Bern wrote on Tue, 1 Aug 2006 05:54:01 -0700:
> We have had to revoke Administrator accounts from all users that are not
> real 'System Administrators'. The problem is that several of these users
> do web development and need to go in to IIS to modify settings/restart it,
> etc. Can anyone tell me how this can be done without having the users use
> an SA account. I did find the tool IIS 6.0 Resource Kit Tools and have
> downloaded it, but when I follow the instructions to right click on a
> node, everything is grayed out. Anyone have any idea of how this can be
> done. Thank you.
IIRC it can't. IIS7 will, I think, allow non-Administrator level admins.
Dan
| |
| Roger Abell [MVP] 2006-08-01, 1:25 pm |
| Let me get this right, you "have had to revoke" admin powers, but
you want to find another way to grant admin powers over IIS ??
Does that sound right ?
What "node" shows all grayed out? Site nodes, vdirs, . . . ?
"Bern" <Bern@discussions.microsoft.com> wrote in message
news:B5CE6969-C49D-4EF3-A7F4-DBFCA5B8A807@microsoft.com...
> We have had to revoke Administrator accounts from all users that are not
> real
> 'System Administrators'. The problem is that several of these users do
> web
> development and need to go in to IIS to modify settings/restart it, etc.
> Can
> anyone tell me how this can be done without having the users use an SA
> account. I did find the tool IIS 6.0 Resource Kit Tools and have
> downloaded
> it, but when I follow the instructions to right click on a node,
> everything
> is grayed out. Anyone have any idea of how this can be done. Thank you.
| |
|
| This doesn't sound strange at all. In fact that is why IIS 7.0 has come out
with the ability to assign rights based on delegation.
Check out this recommendation:
http://www.winserverkb.com/Uwe/Foru...ut-admin-rights
Good Luck!
Jill JOnes
"Bern" wrote:
> We have had to revoke Administrator accounts from all users that are not real
> 'System Administrators'. The problem is that several of these users do web
> development and need to go in to IIS to modify settings/restart it, etc. Can
> anyone tell me how this can be done without having the users use an SA
> account. I did find the tool IIS 6.0 Resource Kit Tools and have downloaded
> it, but when I follow the instructions to right click on a node, everything
> is grayed out. Anyone have any idea of how this can be done. Thank you.
|
|
|
|
|