Granting Read-Only Access to IIS

There may come a time when you need to grant someone Read-Only access to IIS, perhaps for developers to be able to see settings without being able to make changes to them.

 If you’ve been in this position then you also know that it’s not a built-in feature with IIS – which to me, is suprising.

 So how do you do it?  Well, you do it by using an un-supported work around of course!

You will need Metabase Explorer for this – it is included with the IIS 6 Resource Kit

Create new group
Create a special group for non-local admin users, eg DevelopmentIIS
Add the users to the DevelopmentIIS group
Add the DevelopmentIIS group to the IIS_WPG local group

Grant Basic Metabase Access
Run Metabase Explorer, right click on the COMPUTER node property and select permissions
Grant the DevelopmentIIS group – READ permissions
Click on LM (Local Machine), right click, and select permissions
Grant DevelopmentIIS group – READ permissions
Click on W3SVC, right click, and select permissions
Grant DevelopmentIIS group – READ permissions
Repeat for App Pools, Filters, and Info nodes.

Currently Listening to: Tool – Opiate

Popularity: 1% [?]

Related posts:

1. Use ONTAP 8.0 7-Mode Simulator on ESX If you want to use the ONTAP 8.0 7-mode simulator...

Related posts brought to you by Yet Another Related Posts Plugin.