Ive recently taken on a project maintaining an IIS website and SQL database running on a Win 2003 server. My personal computer is running XP Pro. I know that the IIS snap-in for MMC can connect to a remote server to administer it, however my account is restricted from doing so as it has no login rights to the server. I know that adding my domain account to the local admin group on the server will work, but this cannot be done (campus policy). Is there another group i can be added to (power users???) or a policy that can be changed to allow my account IIS management access only?

your saying, you need to admin a win2k3 server.... well i would suggest enable RDP on the win2003 server, use remode desktop to login on the server, make the changes you want... close RDP (and leave the admin logged in in the BG), this way if you need to edit some more changes, all you gotta do is connect to the server again, w8 a few secs, and all will be shown


linky for Remote Desktop --> %SystemRoot%\system32\mstsc.exe (incase you dont have the shorcut due to policy...

im well aware of RDP, but the thing is, i dont think i can be granted session login rights on the server (campus policy). but, XP has the IIS MMC which can connect to a server and manage from there, without logging into a session. is there a way for me to get this right only?

well i dont know how windows handles this? i dont know if it handles it as normal login or interactive or even some 3rd way...

as long as they have not blocked mmc for your user.. id otn think there should be much problems... though... i have 1 pc with 2 normal users @win2003 server, and out-of-the-box they could NOT login to the server..

now i added them the printing admin rights so they now are able to do so.. yet they are still unable to make system changes (and i guess you got normal user rights on server too (i guess its an MS AD structure) so you are able to login using your login credentials on a domain domputer...

so some editing needs to be done for it to work... if they say we wont change a setting for this, its a no-go...