Windows SBS 2008 - Restrict admin

Izi · 1 Dec 2010 at 13:42

I want to let users of my network login to the server and administer IIS, but not be able to administer users etc.

I tried doing it with IIS remote management tools, but it says that the user must be an administrator in order to manage IIS remotely - if I make them admins they will be able to login via RDC and administer users etc. Am I right? is there a work around?

Izi · 1 Dec 2010 at 14:03

Rob7865 said:
Why do you want users to admin IIS on an SBS box?? What have you got running on IIS that will require Users to admin and not the IT staff ??

MMC are your friend here - along with delegate permissions

Rob

Very small company!

6 developers will need to add/amend/administer websites in IIS.

I do not want the developers to access the main box - I will to keep control of users details/server administration.

Can you explain a little more about MMC? I have opened it and I can add IIS administration but how does that help me with the original problem?

thanks for your help!

Izi · 1 Dec 2010 at 15:09

Its only for client previews - I.E the developers do not use them when programming, just publish websites there for clients to access.

I've already got it set up and working nicely leaving the SBS websites in tact. To be honest, I am not using sharepoint or other stuff anyway.

Thanks for the link, I'll have a read.

Izi · 1 Dec 2010 at 15:15

Just had a look at that IIS article, not sure it does what I need.

Feature delegation is about actual website features, not administering IIS.

To be honest, I am not sure what I want is possible - can any body confirm its actually possible to let users connect to iis which are not server admins?