Windows Advisor: Who Took My IIS Manager?
How to find and protect it, in eight steps.
I'm using IIS7 on Windows Server 2008. I've installed the Web Server role but can't connect to the Web site in my browser from another computer; it brings up the authentication box, but my administrative credentials don't seem to work. I also want to be able to configure my Web server so it can be remotely managed, and configure users who can manage sites and apps.
A. First, you need to install Management Services, which, by default, aren't installed in IIS7. To install Management Services in Windows Server 2008, start Server Manager and click Roles. In the right-hand pane, click Add Roles.
If you've already installed IIS7, highlight Web Server (IIS) under Roles in the left pane and then follow these steps:
- Click Add Role Services in the right-hand pane to start the wizard.
- Under Management Tools, check the Management Service box.
- Click Next, Install and Close.
- Restart the Web Service. If you have the IIS Manager console open, close and reopen the console.
- Highlight the server -- not the Web site -- in the console.
- Double-click Management Service in the right-hand pane and then start the service.
- Check the box Enable Remote Connections and configure the rest of the settings as appropriate.
- Now you should be able to remotely connect to the server, sites and applications. You can also configure user and group permissions with IIS Manager Users located in the Management section in the console. If you decide to use IIS Manager credentials in the above step, you need to go to your server and, in the Management area, use IIS Manager Users to add user accounts. These users aren't related to the domain and are non-Windows credentials stored in administration.config.file. You'll find the WMSVC settings in the registry at HKLM\SOFTWARE\Microsoft\WebManagement\Server.
If you want to use IIS Manager credentials, you can go to the specific site in IIS Manager console. In the Features View, double-click IIS Manager Permissions in the Management area. Under Actions click Allow Users and then either add a Windows user from the local server or from the Domain, or add an IIS Manager User. If you don't see an IIS Manager User, you didn't add any users in Step 8.
Zubair Alexander, MCSE, MCT, MCSA and Microsoft MVP is the founder of SeattlePro Enterprises, an IT training and consulting business. His experience covers a wide range of spectrum: trainer, consultant, systems administrator, security architect, network engineer, author, technical editor, college instructor and public speaker. Zubair holds more than 25 technical certifications and Bachelor of Science degrees in Aeronautics & Astronautics Engineering, Mathematics and Computer Information Systems. His Web site, www.techgalaxy.net, is dedicated to technical resources for IT professionals. Zubair may be reached at firstname.lastname@example.org.