How to Give Remote Web Site Operators Access to New Web Site (185381)

We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx

SUMMARY

If you create a new Web site in Microsoft Management Console, Web site operators cannot remotely connect to that site with Internet Service Manager (HTML) until you create a virtual directory called IISADMIN. (Note that users designated as Administrators are able to remotely administer the site through the Administrative Web Site without this virtual directory.) If you create the Web site by using Internet Service Manager (HTML), then your Web server automatically creates the IISADMIN site, because the server assumes that you want to remotely administer that site.

MORE INFORMATION

To create the IISADMIN virtual directory, do the following:

In Internet Service Manager, select the Web site you want your operators to remotely administer.
Right-click, select New, and then click Virtual Directory.
In the Alias box, type IISADMIN and then click Next.
Type the following:

<DriveLetter>:\Winnt\System32\Inetsrv\Iisadmin

Replace DriveLetter with the letter of your local drive. This physical path is the same as the path for the default Web site's Iisadmin directory. Click Next.
Select Allow Read Access and Allow Script Access. Click Next.
Click Finish.
Select the new IISADMIN virtual directory for the Web site, and open its property sheets.
Select Directory Security property sheet. Under Anonymous Access and Authentication Control, click Edit.
Clear the Allow Anonymous Access check box.
Select either Basic Authentication or Windows NT Challenge/Response Authentication, and click OK.