Professional Microsoft IIS 8

Chapter 9

Delegating Remote Administration

What's in this chapter?

• Role-based access
• Remote access
• Delegation settings

wrox.com code downloads for this chapter

The wrox.com code downloads for this chapter are found at www.wrox.com/remtitle.cgi?isbn=1118388046 on the Download Code tab.

Many web environments have a need to distinguish access rights among the system administrators and the website development and management teams. Whether there are two people in these roles or hundreds, it is necessary for the server administration team to specify the access level and settings for the developers or deployment teams.

In the area of delegation, IIS 7.0 broke new ground in two areas. First, IIS administrators could specify and control the website administrators' rights and provide the IIS Manager tool for them to manage their settings through a user-friendly interface. Second, this same access in IIS Manager also enabled site administrators to access web.config files. This may seem strange at first because web.config files used to be for ASP.NET, and it wasn't possible to manage IIS from any type of control file. IIS 8.0 inherits the delegation of configuration from IIS 7.0. You will see that it is powerful, extensible, and distributable. The XML-based format of IIS configuration files allows for easy, granular delegation of the modules and features, ranging from server level settings in the applicationHost.config file to the site or an application level in a web.config file.

The advantages ...