In IIS 6.0, the "Operators" tab in Web Sites Operator Properties was removed (as compared to IIS 5.0):

The reason being (outlined in the Knowledge Base article 298969):

  • A Web site operator is not permitted to change the identification of Web sites, configure the anonymous user name or password, throttle bandwidth, create virtual directories or change their paths, or change application isolation.
  • Web site operators have more limited privileges than Web site administrators. Web site operators are unable to remotely browse the file system, and therefore cannot set properties on directories and files unless a UNC path is used.

I agree.  However, you may be asking: "How do I grant web site owners a way to administer their own site without granting local administrative rights?" The answer is...drum rolls please...You Cannot!  To manage IIS, you must add the operator to the local administrators group.

But if that's not a good enough answer, you can do ONE of the following as a workaround:

1. Grant the web site operator local administrator rights
2. Go to Bernard Cheah's weblog for an UNSUPPORTED workaround. Use at your own risk. And remember, you didn't hear about it from me.

By the way, I've heard that the next version of IIS will support user delegation for administrative tasks.  How cool is that?!

- This posting is provided "AS IS" with no warranties, and confers no rights.