Re: Power Users and IIS 6.0

From: John Alderson (jalderson.nodata_at_adelphia.net)
Date: 03/27/04


Date: Fri, 26 Mar 2004 19:19:25 -0500


"David Wang [Msft]" <someone@online.microsoft.com> wrote in message
news:ucRehM3EEHA.1368@TK2MSFTNGP11.phx.gbl...
> Operators tab and the whole concept of "delegated administration", as a
> feature, was quite broken from a security perspective, so we removed it
from
> IIS6. Only administrators can use the UI to administer IIS6.
>
> --
> //David
> IIS
> This posting is provided "AS IS" with no warranties, and confers no
rights.
> //

David,

Do you mean here that the *implementation* of delegated administration was
broken here? From a security perspective, the concept that folks who should
only be able to manipulate their website must also be able to manipulate
everything else on a Windows Server is really the broken part. I know there
was talk some time ago (9 months or more?) about a delegated administration
add-on being worked on for IIS 6.0. Is that effort dead?

John Alderson



Relevant Pages

  • Re: Programmatically change iis rights
    ... You can manipulate much of IIS with WMI. ... Worth bearing in mind that in the asp.net world, ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Power Users and IIS 6.0
    ... This posting is provided "AS IS" with no warranties, ... > Delegated Administration is an important feature that is in the plans. ... > "John Alderson" wrote in message ... >> IIS ...
    (microsoft.public.inetserver.iis)
  • ADSI and IIS
    ... I have a tool that uses ADSI to manipulate a web application inside IIS ... However, I'm not sure what we would need to redistribute, whether it would ...
    (microsoft.public.sqlserver.tools)

Loading