Remote IISReset for Non-Administrative User

Sometimes we are tasked with the impossible.

I have a group of users that use an archaic web program to input data. A few times a day they need to have an IISReset done because the program locks up IIS. They put in their Spiceworks ticket and someone in the IT Department will then do the reset for them.

The problem with this arrangement is that sometimes there is no one available to do the IISReset so this group of people are "stuck" for however long it takes for one of us to do the reset for them.

My director's answer to this is, lets give their team lead the ability to do the IISReset himself without our involvement. As a department we are OK with this as long we can do this without allowing this user administrative privileges on the server in question (this group is probably the least technical out of the entire company).

My current line of thinking was to create a scheduled task with our service account as the running user and giving the user in question NTFS permissions to the task and then running "schtasks /run /s /tn " from the users local machine. The problem with this is that we get an access denied unless the user is in the administrators group of the server in question.

Does anyone know if there is a way around this or another way of accomplishing what we are trying to do?

Thanks in advance!

-Brian

Environment:

Server: Server 2003 (This will also need to be done on Server 2008)

Workstation: Windows 7