Allow a Windows User or Windows Group to Connect to a Site or an Application (IIS 7)

Applies To: Windows 7, Windows Server 2008, Windows Server 2008 R2, Windows Vista

Allow a Windows user to connect to a site or an application when you want to let the user configure delegated features in that site or application in IIS Manager. You can either allow a specific Windows user, or specify a Windows group so that users of that group can connect to the site or application.


For Windows users to connect to sites and applications for which you grant permission, you must enable remote connections to the management service. For more information about how to configure the management service, see Configuring the Management Service in IIS 7.


For information about the levels at which you can perform this procedure, and the modules, handlers, and permissions that are required to perform this procedure, see IIS Manager Permissions Feature Requirements (IIS 7).

Exceptions to feature requirements

  • None.

To allow a Windows user or group to connect to a site or an application

  1. Open IIS Manager. For information about opening IIS Manager, see Open IIS Manager (IIS 7).

  2. In the Connections pane, expand the Sites node and select the site for which you want to grant permission to a Windows user or group. Or, expand the site and select the application for which you want to grant permission to a Windows user or group.

  3. In Features View, double-click IIS Manager Permissions.

  4. On the IIS Manager Permissions page, in the Actions pane, click Allow User.

  5. On the Allow User dialog box, select Windows to select a Windows user or group. Then click Select to open the Select User or Group dialog box.

  6. Optionally, click Object Types to select the type of Windows objects for which you want to search. You can select the check box for Users, Groups, or both.

  7. Optionally, click Locations if you want to search for users or groups on a domain to which the computer is joined. Otherwise, leave the default value in the From this location box as the computer name to search for a user or group on the local computer.

  8. In the Enter object name to select box, type the name of a user or group and then click Check Names.

  9. Click OK to dismiss the Select User or Group dialog box, and then OK to dismiss the Allow User dialog box.

See Also


Configuring Permissions for IIS Manager Users and Windows Users (IIS 7)