How do I hide 'non-delegated' features in IIS 7?

Question

I'm configuring Feature Delegation on IIS 7.0 to allow some customers to use IIS Manager for Remote Administration to configure their sites.

There are some features where I want to remove delegation and make the feature read-only but allow the user to see the settings. This works fine.

There are other features I want to configure to have no delegation at all but also hide them from the remote IIS manager when they connect to the site.

Is there a way to do this in IIS 7.0/Windows 2008?

Update:

In addition to Scott's answer, if you set a feature to "Not Delegated", you need to reconnect to the site using Remote IIS Manager to see the change. Doing a right-click refresh doesn't do this.

Answer 1

You can manage this from administration.config in %windir%\system32\inetsrv\config.

Just pull the items out of the <modules> section, or you can create a custom section for different users using <location> tags and customize them for each.

Note that people can still obtain any setting from code, so you won't be completely hiding anything, but there are still valid reasons to customize what features are available for your users.