Administering IIS on XP

[Simon]

Hi,

We recently introduced XP onto our developers workstations who require
access to IIS to develop websites. When we built the new systems we thought
it would be a good idea to remove the user from the local admins group to
prevent them from installing the own applications, programs etc. However,
once the user is removed from the local admins group on their wokstation they
are no longer able to administer IIS due to the restrictions of being a
standard user. We tried adding the user to the Power Users group, but this
also failed.

Is there anyway of giving the user rights to access the IIS MMC? Or the
option maybe to look into a 3rd party app or utility that prevents the user
from installing their own software which was the original reason for changing
their rights in the first place.

Thanks in advance,

--
Simon

[Scott M.]

AFAIK, you must have admin rights to admin IIS.


"Simon" > wrote in message
...
> Hi,
>
> We recently introduced XP onto our developers workstations who require
> access to IIS to develop websites. When we built the new systems we
> thought
> it would be a good idea to remove the user from the local admins group to
> prevent them from installing the own applications, programs etc. However,
> once the user is removed from the local admins group on their wokstation
> they
> are no longer able to administer IIS due to the restrictions of being a
> standard user. We tried adding the user to the Power Users group, but this
> also failed.
>
> Is there anyway of giving the user rights to access the IIS MMC? Or the
> option maybe to look into a 3rd party app or utility that prevents the
> user
> from installing their own software which was the original reason for
> changing
> their rights in the first place.
>
> Thanks in advance,
>
> --
> Simon

[Admiral Q]

I'll reinforce what Scott said, if they are developing, especially Windoz
apps, whether web based or PC based, they'll need "local" admin rights -
developing requires access to parts of the OS that only an Admin can reach.
Now the app they are developing may not need to access, but the process of
developing itself requires it. No third party software is going to be able
to help - it is just the way it is.
Now, provided you are running AD on your domain, you can prevent certain
access via Group Policy, but you have to be careful with developer machines,
the wrong change can completely cripple the development software.

--
Star Fleet Admiral Q @ your service!
"Google is your Friend!"
www.google.com

***********************************************

"Simon" > wrote in message
...
> Hi,
>
> We recently introduced XP onto our developers workstations who require
> access to IIS to develop websites. When we built the new systems we
thought
> it would be a good idea to remove the user from the local admins group to
> prevent them from installing the own applications, programs etc. However,
> once the user is removed from the local admins group on their wokstation
they
> are no longer able to administer IIS due to the restrictions of being a
> standard user. We tried adding the user to the Power Users group, but this
> also failed.
>
> Is there anyway of giving the user rights to access the IIS MMC? Or the
> option maybe to look into a 3rd party app or utility that prevents the
user
> from installing their own software which was the original reason for
changing
> their rights in the first place.
>
> Thanks in advance,
>
> --
> Simon

[Marco Peretti]

Hi Simon

a third party product that would allow you to run iismgr.exe as admin is
PolicyMaker Application Security from www.desktopstandard.com

HTH
--
marco [alla] neovalens [punto] com

[ www.neovalens.com ]
----


"Simon" > wrote in message
...
> Hi,
>
> We recently introduced XP onto our developers workstations who require
> access to IIS to develop websites. When we built the new systems we
> thought
> it would be a good idea to remove the user from the local admins group to
> prevent them from installing the own applications, programs etc. However,
> once the user is removed from the local admins group on their wokstation
> they
> are no longer able to administer IIS due to the restrictions of being a
> standard user. We tried adding the user to the Power Users group, but this
> also failed.
>
> Is there anyway of giving the user rights to access the IIS MMC? Or the
> option maybe to look into a 3rd party app or utility that prevents the
> user
> from installing their own software which was the original reason for
> changing
> their rights in the first place.
>
> Thanks in advance,
>
> --
> Simon