You need to ensure that User1 can use Internet Information Services (IIS) Manager to remotely administer the Default Web Site on Server1
You need to ensure that users can only access files that have the .htm, .html, .asp, and .aspx file extensions