Use Local IIS without Administrator rights

This post has been republished via RSS; it originally appeared at: IIS Support Blog articles.

Many developers don’t have Administrator rights on the machines they use for development. IIS Express is used to allow these developers load and run projects in Visual Studio without Administrator rights.

 

If your project is not compatible with IIS Express and you want to run it on Local IIS without Administrator rights on the machine, try the two workarounds below.

 

Run the application pool under the non-admin user’s account

  1. Search for Internet Information Services in Start
  2. Go to Application Pools. Select DefaultAppPool
  3. Go to Advanced Settings on the right side
  4. Change Identity to your domain user account
  5. Reset IIS (Go to Command Prompt and run iisreset)
  6. Test running the VS project in Local IIS (without admin rights)
  7. If it doesn’t work, try the second suggestion below (SeDebugPrivilege)

Nedim_0-1584132533440.png

 

If you want to use this workaround, please consider the risk below.

Before you change the ASP.NET worker process to run under a different account, consider the possible consequences if the ASP.NET worker process should be hacked while running under that account. The ASPNET and NETWORK SERVICE user accounts run with minimal permissions, reducing the possible damage if the process is hacked. If you must change the ASP.NET worker process to run under an account that has greater permissions, the potential damage is greater.

Source

 

Give SeDebugPrivilige to the domain user account

  1. Search for “run” in Start
  2. Type gpedit.msc
  3. Navigate to “Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > User Right Assignment > Debug programs
  4. Add user’s account
  5. Restart the machine
  6. Test running the VS project in Local IIS (without admin rights)

If you want to use this workaround, please note that the user who has given Debugging permission can debug all services in Windows.

REMEMBER: these articles are REPUBLISHED. Your best bet to get a reply is to follow the link at the top of the post to the ORIGINAL post! BUT you're more than welcome to start discussions here:

This site uses Akismet to reduce spam. Learn how your comment data is processed.