Securing MSCS_Admin Tables

The following table lists the permissions a given account should have for the MSCS_Admin tables. Use SQL Server Enterprise Manager to set these permissions.

Note

• If your site is based on the Component Object Model (COM), the default anonymous account in IIS is IUSR_<computername>. If your site is based on ASP.NET, the default anonymous account is ASPNET.

Table name	IUSR or ASPNET	IWAM	Service accounts	COM+ accounts	System administrators	Business managers
ExtendedProps	No access	No access	No access	No access	Select Insert Update Delete	No access
pupdbscripts	No access	No access	No access	No access	Select Insert Update Delete	No access
ResourceProps	Select	Select	Select	Select	Select Insert Update Delete	Select Update
Resources	Select	Select	Select	Select	Select Insert Update Delete	Select
SiteResources	Select	Select	Select	Select	Select Insert Update Delete	Select
Sites	Select	Select	Select	Select	Select Insert Update Delete	Select

Copyright © 2005 Microsoft Corporation.
All rights reserved.