Restarting IIS from IIS manager

[Danny Lai]

Hi,

My user is already a member of the local Admin group of the server. He can restart the IIS services from the services but when he tried to do it via the IIS manager, he gets a prompt that he do not have access to the machine. Why is this so?

Please help.

Thanks
Danny

[Igor Karasik]

Danny,
Try to execute "iisreset /enable" command
from command prompt

http://tinyurl.com/nzbqc

[Danny Lai]

Hi,

I've tried but the user is not able to. But my account can. What could be the problem. We all have the same admin rights but only I'm able to restart the services via IIS manager.

br
danny

[Igor Karasik]

Danny,
User going to Administrative tools->IIS manager and trying to execute "restart IIS" task, right ?
What exact error message user have?
Is your account is member of "Domain Admins" group and user account is not member of "Domain Admins"?

[Danny Lai]

Hi Igor,

Yup. The user are not in the Domain Admin group. They are only in the Local Administrator group. When they try to restart the services via IIS Manager, they get " You do not have access to this machine". Is this only in Win2k3 as user had no such problem in win2k.

br
danny

[Igor Karasik]

Danny,
is user log on locally on the server or use
IIS manager for remote server?

Is user can successfully run iisreset from command line?

Also, try to compare User rights assignment for "Domain admins" group and for local admins (under Secutiry settings->Local policies in local group policies editor).

[Danny Lai]

Hi,

Yes. the user is able to run iisreset on the server. So what can be the problem?

danny

[Igor Karasik]

Danny,

>>So what can be the problem?
Don't know. It is strange.
I test it on our windows 2003 servers - it works Ok for local admin users.
I guess the problem is in User rights assignment in Local policies, but it is only IMHO.
Anyway, as workaround you can use iisreset command (you can run it from remote computer by using psexec
http://www.sysinternals.com/Utilities/PsExec.html)

[Jon Finley]

This sounds like you may need to add in the Group, or user for the ability to connect across the network, or log on locally setting.

check within gpedit.msc under computer configuration, Windows settings, security settings, local policies, under either User rights, or security policies.

Jon

[Danny Lai]

Hi Everyone,

I've looked through the whole policy but still cannot find any restriction stopping the users from restarting the IIS via IIS Manager. Anyway, the user decide to give up and revert back to Win2k.

Thanks for all your help and guidance.

br
danny