Martin Pavlis - KPCS CZ, s.r.o., www.kpcs.cz

konzultace a projekty v oblasti Microsoft technologií
posts - 693, comments - 153, trackbacks - 0

My Links

News

KONZULTANT.NET

KPCS CZ, s.r.o.

Subscribe with Bloglines

Locations of visitors to this page

Article Categories

Archives

Odkazy

Remote Desktop

Web Site Operators v IIS 6.0

Nevím, zdali jste se setkali s následujícím problémem. V IIS 6.0 zmizela možnost pracovat s tzv. Web Operators. V praxi to byla záložka na každé web site, kde jste mohli oddelegovat práva někomu dalšímu, typicky při hostování cizí web site na vašem IIS. Dnes jsem na internetu našel návod, jak tento problém obejít.

Důležité: Toto řešení není podporováno společností Microsoft, vše provádíte na vlastní riziko!

Step 1: User Account Management
a) Create special user group for non local admin users. E.g. WebOperator
b) Place the desire users in this WebOperator user group.
c) Add WebOperator group to the IIS_WPG local group.

Step 2: Grant Basic Metabase Access
a) Run Metabase Explorer, right click COMPUTER node property, and select permissions.
b) Grant WebOperator group - READ permission.
c) Click on LM (Local Machine) node, right click, and select permissions.
d) Grant WebOperator group - READ permission
e) Click on W3SVC node, right click, and select permissions.
f) repeat step (b) and grant the permission.
g) Expand W3SVC node, repeat step (b) for App Pools, Filters and Info nodes.

Step 3: Grant Special User WebSite Access
a) Run Metabase Explorer, navigate to desire website node, and select permissions.
b) Grant the specific user account - FULL CONTROL permission.
c) Exit Metabase Explorer.

Note: If the user need to create new application or modify application pool configuration, grant the user FULL Control on the App Pool node.

Step 4: Create new customize IIS MMC
a) Click the Start menu, and then click Run. 
b) Type Mmc.exe and then click OK. 
c) In the MMC, click the File menu, then click Add/Remove Snap-in. 
d) Click Add, and then select the Internet Information Services snap-in. 
e) Click Add, click Close, and then click OK to return to the main MMC window. 
f) Click the File menu, then click Options, select any of the User modes, and then click OK.
h) Click the File menu, click Save, and enter a relevant name for the new IIS MMC.

Step 5: Testing
a) Login as the user, fire up the customize IIS MMC
b) Try to administrative the website which the user has granted FULL CONTROL.

Note: if you are experiencing 'Access Denied' related error messages, most likely are due to permission settings in the above steps. Re-login as local admin and verify your configuration.

Nástroj, který budete potřebovat: Metabase Explorer from IIS 6.0 Resource Kit
http://www.microsoft.com/downloads/details.aspx?FamilyId=56FC92EE-A71A-4C73-B628-ADE629C89499&displaylang=en

Print | posted on Thursday, May 19, 2005 8:52 AM |

Comments have been closed on this topic.

Powered by: