Re: IIS Read Only Access to IIS Manager

On May 9, 10:46 am, Dale Meredith
<DaleMered...@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
Is there a way to configure the server so that certain users can remote
desktop or use a custom MMC with the IIS snap in to launch the IIS Manager,
see the configuratiion settings but not make changes to any settings?

I have some web developers that I'm not keen on give admin rights to :)

-Dale


Can you describe the usage scenario where you want someone to be able
to read IIS configuration but not write to it, and the security
implications of such a model? Would you want the delegated user to be
able to know where all your files are kept and any special username/
passwords (because they can read the configuration but not write). And
how do you distinguish between what is sensitive for you vs what is
sensitive for anyone else?

As you can see, a read-only admin model quickly goes down a slippery
slope. IIS7 is written to support delegated administration, where non-
admins have rights to fully administer their own websites... but read-
only admins are a different beast.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//

.

Relevant Pages

  • Help with Interactions between IISadmin mmc and FP2003
    ... I'm a relative newbie to IIS and Frontpage, but I am a long time IT ... and I have done a bit of web site publishing admin using ... The latter, "My Webs", folder would mirror ...
    (microsoft.public.frontpage.client)
  • Re: Published app doesnt work; what did I forget?
    ... It shows up in IIS but I don't see ... anything for Central Admin. ... works) then there is something wrong with ASP.NET configuration. ... I really just want it rebuilt anyway. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Published app doesnt work; what did I forget?
    ... It shows up in IIS but I don't see ... anything for Central Admin. ... I'm going to have that machine redone. ... works) then there is something wrong with ASP.NET configuration. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: IIS Authentication Problems
    ... Sounds like this machine is now a domain controller, and IIS no longer has ... for the IUSR_nt-rh-adc-3 account ... : Authentication Package: NTLM ... local Admin details to no avail. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Published app doesnt work; what did I forget?
    ... It shows up in IIS but I don't see ... anything for Central Admin. ... if static html is working (just put hello.htm to see if this ... works) then there is something wrong with ASP.NET configuration. ...
    (microsoft.public.dotnet.framework.aspnet)