Home / server / Questions / 205684
Accepted
Jesse
Asked: 2010-11-25 10:11:50 +0800 CST

How do I let a non-admin manage IIS 7 on a Domain Controller?

  • 772

I've got IIS 7 running on two Server 2008 machines. One is a Domain Controller.

How do I let my web guy manage IIS -- create applications and virtual directories, modify all settings -- without putting him in the administrators group (local or domain)?

(I know there's a similar question posted here, but the accepted answer was "make him an admin", and that's not an option for me.)

windows-server-2008 iis-7

3 Answers

  1. Best Answer
    • 3

  2. I had a similar problem and neither "make him an admin" or using Feature delegation (kept getting an error about a missing configuration section 'wsgi' were working for me.

    This is what you do:

    1. Install the IIS Management Service (using Server Manager)

    2. Open IIS Manager

    3. Select the Site you want to grant access to and select the "IIS Manager Permissions" feature. From there, I add the user to the list using the "Allow User..." option.

    4. From the Server Features View, select the "Management Service" feature and make sure the service is running.

    Your non-admin user should be able to access the specific website settings from the IIS Manager with his account. Unlike administrators, he won't see the available sites by default the first time around. He will have to establish a new connection to a website by specifying the server (localhost) and the website (as specified in IIS, NOT the actual public URL).

    Once the connection is established and saved, it will only ask for the account password the next time you run IIS Manager.

    Hope this helps anybody with a similar issue, I had to dig a bit myself to find this solution.

    • 2

  3. I believe IIS management has it's own set of rights with IIS7. Information for delegating IIS administration can be found here.

    • 0