IIS 5.1 Permissions and Rights

[shinerma]

Classroom situation
Running Windows XP on local computer in classroom
Running Windows NT on school file server in building (used
for saving and retrieving students files only-no
applications are stored on this server-SUCCESS domain)
Running Internet Information Services 5.1 on localhost
computer as staging/test server
Running FrontPage 2002 SP3 on local computer
Each student will sit at the same computer each day

Students log on to SUCCESS domain upon entering classroom
I, as the teacher, am administrator of local computers in
classroom
In order to publish their saved web sites to local
computer using IIS, they must be able to access and work
on C:\localhost and start/stop IIS.

Students need to be able to open and publish their saved
web sites from SUCCESS server to local computer. (They
could copy their saved files from the SUCCESS server to
the local machine in their user file if this would make it
easier.) I do not want to have to type in my username and
password each time they try to publish if I don't have to,
but I don't want to give them full administrative rights
if I don't have to either.


IIS default user setting is IUSR_computername as Guests

1. How do I set up access and rights for IIS for students?

2. How do I set up access and rights for IUSR_computername
for students?

I do not want them to be able to download and install
programs and change system settings any more than
necessary.

I do not have a handle on user accounts, groups,
permissions, rights. Please be specific. I am new to XP,
IIS, and FrontPage this year.

 

[Roger Abell]

You can set IIS to start automatically when the machine starts.
As strudents are not admins they cannot stop it, so it should
always be running when the machine is up.

They have no need for the IUSR_machine account. IIS uses
this, and users of IIS have no need to even know it exists.

Since each student uses the same machine all the time, you
can make a web for them on their machine. They would
then, after they have been granted author rights on the web,
be able to publish down from the server their web to either
their local file storage area or to http://localhost/theirweb

On the IIS installs on the XPs, you should make certain that
you have all service installed, and ideally you should follow
the IIS checklist (at microsoft.com/security) and get IISlockdown
and the latest URLscan installed. Also, as they are using Front
Page 2002 you should make sure that the Front Page Server
Extensions 2002 have been installed (an this then has post
install security update - visit Office Update should detect that
you need this).

Once the server extensions are installed you can visit the
administrative interface in order to grant their account
authoring authority for their web. To do this, in the IIS
mgmt interface, define the new web, then r-click into its
properties and convert it to a front page extended web
Once you have FP extended web(s) run the Sharepoint
Administration tool from the Administrative Tools folder,
and click links to get to site administration, then to the
specific web, and then finally in the Users link for the
web (you may first need to change the web to not use
permissions that are the same as its parent)

Sounds like a lot, but it is rather straight-forward once
you find where.