Forum Discussion
IIS extension is not working - WAC 1909
IIS is running and working on my Windows Server 2019 LTSC. on WAC 1909, I installed IIS extension, then when I click on it it asks me to install IIS administration on my server clicke...
A couple things to check on the server machine:
1. In `%ProgramFiles%\IIS Administration\2.3.0\Microsoft.IIS.Administration\config\appsettings.json`, does the following exist
"users": {
"administrators": [
"IIS Administration API Owners"
],
"owners": [
"IIS Administration API Owners"
]
},2. Does this group `IIS Administration API Owners` exist on your server?
3. Are you in this group (as IIS extension should have added you to the group)
Peter_Hsu
Microsoft
Microsoft
A couple things to check on the server machine:
1. In `%ProgramFiles%\IIS Administration\2.3.0\Microsoft.IIS.Administration\config\appsettings.json`, does the following exist
"users": {
"administrators": [
"IIS Administration API Owners"
],
"owners": [
"IIS Administration API Owners"
]
},
2. Does this group `IIS Administration API Owners` exist on your server?
3. Are you in this group (as IIS extension should have added you to the group)
Thank you very much!
1. checked, yes.
2. checked, yes.
3. checked, no. I added myself "Administrator" user to that group. and it worked!
But, something strange is happening that I don't understand, could you please explain why is this happening ?
so after adding "administrator" to that group you mentioned, it did the job, but when I login to my server in WAC using these credentials:
user: administrator
password: my password
then i still get the same error in IIS extension but ALL other extensions in WAC still work fine.
and when i login to my server in WAC using these credentials:
user: domain.local\administrator
pass: my password
then all extensions including IIS work.
- Thanks for clarifying, appreciate that, hope it gets fixed in final ver 1909
- Peter_Hsu
IIS extension manages IIS via IIS Administration API. Which has it own permission settings. When you use IIS extension it should have ensured that you are in the "IIS Administration API Owners" group (by explicitly adding you to the group). There seem to be a bug there that we need to fix.
When you use local administratior username and password you are identified as .\Administrator and the same bug must have prevented IIS extension adding .\Administrator to the local group again. Only if you adding the username "administrator" to "IIS Administration Owners" would the IIS extension work.
