4

I have installed WebDeploy on my IIS server to allow publishing of sites via TFS. On configuring web deploy for a particular site, which user account should I use?

Within the IIS tutorial, we are told to use a non-administrator Windows user, but the ASP.NET tutorial seems to show a generic user. By default, Web Deploy selects the server administrator, which surely can't be good:

Web deploy user

Should we create a new account and specify that username and password within TFS? Some blogs suggest doing this and setting the password to never expire. If so, which permissions need setting on which directories for our new user?

I see there is also a WDeployAdmin user which has been created during install. Is this relevant?

1 Answer 1

5
+50

The general approach is to create a service account that has access to the resources needed to deploy the files to the target machine, including but not limited to

  1. access by including deploy account in file / directory permission lists

  2. Local administrator to modify / add virtual directories or other IIS settings

Note that the password should be set to never expire.

Normally the account used is a local admin ( not domain admin ) on the box where the web deploy is taking place. Microsoft attempted to fix web deploy so that not admin users can use web deploy but it does have its own issues.

http://blogs.iis.net/msdeploy/archive/2011/04/05/announcing-web-deploy-2-0-refresh.aspx

I would normally use an account that is local admin on the target system where the web site is being deployed.

WDeployAdmin would appear to be used for non-admin users to install. I would create a separate service account for deployment process.

1
  • 2
    So I should not simply select WDeployAdmin from the dialog box? Moreso, how do I know what permissions are needed? Is it trial and error? Is seems odd that there are no specifics on this within the tutorials.
    – EvilDr
    Aug 31, 2014 at 8:58

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.