Delegate Site and Application Management (IIS 7)

  • Article

Applies To: Windows 7, Windows Server 2008, Windows Server 2008 R2, Windows Vista

In IIS 7, you can delegate features in IIS Manager to non-administrators.

Features in the Delegated Management category include the following:

  • Feature Delegation

  • IIS Manager Users and IIS Manager Permissions

  • Management Service

Feature Delegation

With feature delegation, you can configure which features of a site or application to delegate to IIS Manager users and Windows users or groups in IIS Manager. This gives server administrators the ability to delegate control of specific features to site or application users without having to give them full control of the server. For more information about delegation, see Configuring Delegation for a Site or an Application in IIS 7.

IIS Manager Users and IIS Manager Permissions

With the IIS Manager Users feature, server administrators can create non-Windows user accounts. These users can then use their IIS Manager credentials to connect to a site or an application to which they have been granted permission with the IIS Manager Permissions feature. Server administrators include members of the Windows Administrators group on the server and also any domain administrators if the server is joined to a domain.

Server administrators can grant permission to connect to a site or an application to IIS Manager user accounts and to Windows users or groups on the computer. For more information about the IIS Manager Users and IIS Manager Permissions features in IIS 7, see Configuring User Accounts to Connect to Sites and Applications in IIS Manager (IIS 7).

Management Service

Management service is an NT service that provides the ability to connect to IIS 7 remotely using IIS Manager. Additionally, this service enables users to connect to sites and applications on the server locally. For more information about the management service, see Configuring the Management Service in IIS 7.