IIS 7 and Above
UI & Remote Management
Windows Authentication and Delegation
Last post Aug 10, 2007 07:16 PM by mvolo
Aug 03, 2007 05:07 AM|OWScott|LINK
I have 2 questions regarding Windows authentication for remote access to IIS Manager in IIS7.
1) When connecting remotely, I don't see the checkbox "Use IIS Manager credentials". Does that mean that windows auth isn't available over a WAN?
2) When trying to connect right on the local server using IIS Manager and using a user that I created myself, I get the following error:
Could not connect to the specified computer.
Details: User Account Control (UAC) uses a filtered token that has fewer rights than your administrative account. To connect remotely, you must disable UAC token filtering on the remote computer. Or you can manage IIS locally by logging on directly to
the Web server.
I'm using a server that isn't part of a domain. Is it different between a workgroup environment and a domain environment? What do I do to get around UAC? (testing with the user as an administrator doesn't solve it, so there are some other policies that
are needed to get this working).
Aug 07, 2007 05:47 PM|mvolo|LINK
You need to enable IIS Manager credentials for the management service. You can do it by following this article:
http://www.iis.net/articles/view.aspx/IIS7/Managing-IIS7/Delegation-in-IIS7/Delegating-permissions-in-IIS-Manager/Configuring-Remote-Administration-and-Feature-Dele?Page=2 (NOTE this article is for Windows Server beta 3).
To bypass the UAC issue, you would need to run the Admin tool as administrator. Start > Run > inetmgr.exe, dont press enter, then right click on the inetmgr.exe icon in the search results and chose "Run as Administrator". Note that your user must be an
administrator to be begin with.
IIS Core Server
Visit mvolo.com for more inside information on IIS7, IIS and ASP.NET
Aug 09, 2007 03:26 AM|OWScott|LINK
Thanks for the reply Mike. I had IIS Manager management service to allow both types of authentication so the checkbox not being there must be by design.
I don't get the UAC issue anymore, but I've just refreshed with a fresh build and now it starts as an administrator by default so it must have taken care of that. I think I'm all set for this now.
Aug 10, 2007 07:16 PM|mvolo|LINK
Glad to hear - good luck!