Permission for IIS Server for non admin user

Ahmed Rizwan Khan 5 Reputation points
2025-07-25T13:25:00.7733333+00:00

I want to create a new permission for IIS Server for non admin user who can manage and edit IIS Settings and all the site inside the IIS Server but without assigning them the admin privileges.

I have tried to assign the permissions from IIS Server to the main site or even existing site but still it is not working it is only allowing the user to create a new site, but it is not allowing user to manage the existing sites.

Windows development | Internet Information Services
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Lex Li 6,037 Reputation points
    2025-07-25T20:46:46.14+00:00

    All IIS operations require administration permissions, and the only supported exception is that you follow this article to configure remote management and feature delegation.

    If you, however, use any other steps, then you have to stop and revert, as that's not supported by Microsoft.

    0 comments No comments

  2. Tom Tran (WICLOUD CORPORATION) 525 Reputation points Microsoft External Staff
    2025-07-28T07:41:52.41+00:00

    Hi Ahmed Rizwan Khan,

    By default, IIS requires administrative rights to manage server-wide settings and existing sites because these operations modify protected configuration files like applicationHost.config. While you've successfully allowed the user to create new sites, managing existing ones typically requires elevated access.

    IIS provides a built-in way to delegate site-level management using IIS Manager Users and Feature Delegation. This allows non-admin users to manage specific sites and features without full admin rights.


    1.Enable IIS Manager Users:

    • In IIS Manager, go to Management > IIS Manager Permissions.
    • Add a new IIS Manager User (these are IIS-specific, not Windows accounts).

    2.Delegate Features:

    • Go to Feature Delegation at the server level.
    • Set desired features (e.g., Authentication, Default Document) to Read/Write.

    3.Assign Site Permissions:

    • Select the site you want the user to manage.
    • Open IIS Manager Permissions and add the user.

    Reference:

    Let me know if you need help!


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.