Securing MSCS_Admin Tables

The following table lists the permissions a given account should have for the MSCS_Admin tables. Use SQL Server Enterprise Manager to set these permissions.

Ee798074.note(en-US,CS.20).gifNote

  • If your site is based on the Component Object Model (COM), the default anonymous account in IIS is IUSR_<computername>. If your site is based on ASP.NET, the default anonymous account is ASPNET.
Table name IUSR or ASPNET IWAM Service accounts COM+ accounts System administrators Business managers
ExtendedProps No access No access No access No access Select
Insert
Update
Delete
No access
pupdbscripts No access No access No access No access Select
Insert
Update
Delete
No access
ResourceProps Select Select Select Select Select
Insert
Update
Delete
Select
Update
Resources Select Select Select Select Select
Insert
Update
Delete
Select
SiteResources Select Select Select Select Select
Insert
Update
Delete
Select
Sites Select Select Select Select Select
Insert
Update
Delete
Select

Copyright © 2005 Microsoft Corporation.
All rights reserved.