Website Administration

[windowsfan]

My windows server 2003 box is a terminal server and a webserver. We have hired outside contractor for creating a webapplication. He has access to terminal server, but he is not able to administer websites. What permission I need to set so that he can only make changes to his virtual directory under default website. As of right now he is not able to manage IIS.

 

[windowsfan]

Found out from Microsoft site that there is no delegation option available for IIS 6.0. To Manage website using IIS you have to be member of local administrator account. In my case I cannot make consultant member of local admin. Please help if there is other way to accomplish this.

 

[WhoKilledKenny]

What concerns do you have with allowing him temp access as a local Admin? If political reasons, I can understand that...

 

[Cstorms]

Couldnt you just give him access to the linked virtual directory and from there if he needs to install extentions you could just do that for him since youre the webmaster. I spose thats assuming that he only needs access to the files that are being published.

 

[windowsfan]

Whokilledkenny,
you mean to say make him member of local administrator group temporary?

CStorms,
He only needs to administer his vitual directory from IIS management, like change default web page, App pool etc? Is there a way to delegate those permission? Right now he cannot even open IIS as he is not member of local administrator group?

 

[Cstorms]

Sorry if this is not what you are looking for but I thought this might be of service I am writing this up as I am being uber distracted.

http://www.iis-resources.com/modules/AMS/article.php?storyid=377

 

[windowsfan]

Thanks Cstorms.

 

[jshurst]

Configuring the start page and the default app pool should only be a one time thing so I don't see why this would ever need to change once it is set up. It would certainly make it easier for him/her if they were able to administer IIS, but probably not necessary. Just set it up and then make it a shared folder and give the appropriate permissions on the share. I think that should be enough...

J

 

[windowsfan]

Thats what I ended up doing.

Thanks everyone.

 

[windowsfan]

Thats what I ended up doing.

Thanks everyone.