is there a way to deny certain users the ability to use the Virtual
Directory Creation Wizard?

[ Post a follow-up to this message ]

Hi,

Only administrators can manage IIS. If user is not local administrator
he/she will not be able to change settings (and view IIS MMC)...

I believe this is supposed to change in next version of IIS...

--
Mike
Microsoft MVP - Windows Security


<jeffdrobinson@gmail.com> wrote in message
news:1131643067.450898.282900@g47g2000cwa.googlegroups.com...
> is there a way to deny certain users the ability to use the Virtual
> Directory Creation Wizard?
>

[ Post a follow-up to this message ]

Hi Mike, thanks for your reply.

Example: i have found that if i use NTFS security on the file
c:\winnt\system32\inetsrv\w3ext.dll and deny a specific user all
priveledges to that file, the "Web Sharing" tab will disappear when
that user views the properties on a folder.

I'm hoping there is a similiar way to prevent the execution of the
"Directory Creation Wizard"

one option that i have found, but it is too restrictive, is to deny
access to the c:\winnt\system32\inetsrv\iisui.dll with NTFS
security...but that prevents the user from opening the IIS MMC at
all...i want the user to be able to open IIS MMC, but i don't want them
to to use the "Directory Creation Wizard"

[ Post a follow-up to this message ]

i never found a way to do this (other than not allowing users to be
local administrators on a server)...so, i settled for a scheduled vbs
script that would email me if a new virtual root is created

[ Post a follow-up to this message ]