book

Professional IIS 7.0

by Ken Schaefer, Jeff Cochran, Scott Forsyth, Rob Baugh, Mike Everest, Dennis Glendenning

March 2008

Intermediate to advanced

838 pages

23h 16m

English

Wrox

Read now

Unlock full access

Who This Book Is ForHow This Book Is StructuredWhat You Need to Use This BookConventionsSidebarSource CodeErratap2p.wrox.com
1.1. IIS Versions 1.0 to 4.01.2. IIS 5.0 and 5.11.3. IIS 6.01.3.1. Secure by Default1.3.2. Request Processing1.3.3. Additional Features1.3.3.1. HTTP Compression1.3.3.2. Kernel Mode and Persistent Caching1.3.3.3. XML Metabase1.3.3.4. Application Pools1.3.3.5. FTP Service1.3.3.6. SMTP and POP Services1.4. IIS 7.0 Versions1.5. IIS 7.0 Features1.5.1. Integrated Request Pipeline1.5.2. Configurability1.5.2.1. Using applicationHost.config1.5.2.2. Extensible Configuration Schemas1.5.3. Componentization1.5.4. Security1.5.4.1. Minimal Installation1.5.4.2. Management Delegation1.5.4.3. Unified Authentication and Authorization1.5.4.4. Request Filtering1.5.4.5. Remote Management1.5.5. IIS Administration Tools1.5.5.1. IIS Manager1.5.5.2. AppCmd.exe Command-Line Utility1.5.5.3. ASP.NET Management Namespace1.5.5.4. Windows Management Instrumentation1.5.6. Diagnostics1.5.6.1. Run-Time State and Control API1.5.6.2. Request Tracing1.5.7. Compatibility1.5.8. Additional Features1.5.8.1. FTP1.5.8.2. SMTP1.6. Summary
2.1. IIS 4.0 and Previous Versions2.1.1. Inetinfo.exe2.1.2. ISAPI versus CGI2.1.3. Active Server Pages2.2. IIS 5.02.2.1. Application Protection2.3. IIS 6.02.3.1. Http.sys2.3.1.1. Kernel Mode versus User Mode2.3.1.2. Other Http.sys Functions2.3.2. IIS Admin Service2.3.3. Web Administration Service2.3.4. Worker Process2.3.4.1. Process Isolation2.3.5. Application Pools2.4. IIS 7.0 Architecture2.4.1. Integrated Pipeline Mode2.4.1.1. Classic Mode2.4.1.2. Integrated Pipeline Mode2.4.1.3. Moving an Application to the Integrated Pipeline2.4.1.4. Application Pools and the Pipeline2.4.2. Extensibility and Modularity2.4.2.1. Modules2.4.3. IIS Manager Extensibility2.4.4. Metabase—Going, Going, Gone!2.4.4.1. applicationHost.config and web.config2.4.4.2. Other XML Configuration Files2.4.4.3. Metabase Compatibility2.4.5. WAS and the Worker Process2.5. Windows Server 2008 Architecture2.5.1. Server Core2.5.2. Virtualization2.5.3. Failover Clustering2.5.4. WCF2.5.5. BitLocker Encryption2.5.6. Network Access Protection2.6. Summary
3.1. Windows 2008 Server Deployment Planning3.1.1. Windows Server 2008 Requirements3.1.2. 32 Bit or 64 Bit?3.1.3. Which Server Edition?3.1.3.1. Windows Server 2008 Standard Edition3.1.3.2. Windows Server 2008 Web Edition3.1.3.3. Windows Server 2008 Enterprise and Datacenter Editions3.1.3.4. Server Core3.1.3.5. Server Virtualization3.1.3.6. Windows Server 2008 for Itanium-Based Systems3.1.3.7. Licensing3.1.4. Upgrade or New Installation?3.1.4.1. New Installations3.1.4.2. Upgrades3.1.4.2.1. Upgrade Paths3.1.5. Planning Your Hardware3.1.5.1. Hardware Compatibility3.1.5.2. Hardware Requirements and Recommendations3.1.6. Planning Your Network3.1.6.1. Active Directory or Stand-Alone?3.1.6.2. Server Location3.1.6.3. Server Farms3.1.6.3.1. Network Load Balancing3.1.6.3.2. Clustering3.1.6.3.3. Virtualization3.1.6.3.4. Common Scenarios3.1.7. Planning Your Security3.1.7.1. Network Security3.1.7.1.1. Network User Accounts3.1.7.1.2. Firewalls and Proxy Servers3.1.7.1.3. Network Access Protection3.1.7.1.4. IPv63.1.7.1.5. Logging and Auditing3.1.7.2. Windows Server Security3.1.7.2.1. Application Security3.1.7.2.2. Physical Security3.1.8. Planning Backup and Recovery3.1.8.1. Volume Shadow Copy Services3.1.8.2. Windows Server 2008 Backup3.2. IIS 7.0 Deployment Planning3.2.1. IIS 7.0 Requirements3.2.2. Installation Decisions3.2.3. Planning for IIS-Specific Security3.2.3.1. Security Changes from IIS 6.03.2.3.2. Management Accounts and Delegation3.2.3.3. IIS 7 Access Policies3.2.4. Planning Development Environments3.2.5. Planning Production Environments3.2.6. Shared Configuration3.2.7. Content Replication3.3. Application Deployment Planning3.4. Automation and Deployment Tools3.4.1. Windows Deployment Services3.4.2. Volume Activation3.5. Capacity Planning3.5.1. Traffic3.5.2. WCAT3.5.3. IIS 7.0 Request Tracing3.5.4. Scalability3.5.5. Application Capacity Planning3.6. Summary
4.1. Clean Installation4.1.1. With Windows Server 2008 Installation4.1.1.1. Default Installation with Operating System4.1.1.2. Testing Your Installation4.1.2. From DVD to an Existing Server4.1.2.1. Default IIS 7.0 Installation4.2. Upgrade Installation4.2.1. In-Place Upgrade4.2.1.1. Current Server4.2.1.2. Upgrading Windows Server 2003 to Windows Server 20084.2.1.3. Upgrading Applications and Settings4.2.1.3.1. Metabase Compatibility4.2.1.3.2. Integrated Pipeline Mode versus Classic Pipeline Mode4.2.2. Migration Upgrade4.3. Adding Features to an Existing Installation4.3.1. Installing New Features4.3.2. Configuring and Testing New Features4.3.2.1. ASP.NET 1.1 on IIS 7.04.3.2.1.1. IIS 6.0 Metabase Compatibility4.3.2.1.2. Installing ASP.NET 1.1 Framework and Updates4.3.2.1.3. Enabling ASP.NET 1.1 ISAPI Extensions4.3.2.1.4. Configuring ASP.NET 1.1 Machine.config File4.3.2.1.5. Configuring ASP.NET 1.1 Application Pool4.4. Automated Installation and Configuration4.5. Server Core Command-Line Installation4.5.1. Pkgmgr.exe4.5.1.1. Testing IIS Installations on Server Core4.5.2. Unattended Installations Using Pkgmgr.exe4.5.3. Installation Using Windows Deployment Services4.6. Hosting Service Recommendations4.6.1. Directory Structure4.6.2. Web Server Accounts and Application Pools4.6.3. Configuring Shared Hosting with Managed Code4.6.3.1. Creating Users4.6.3.2. Setting Directory Permissions4.6.3.3. Creating Application Pools4.6.3.4. Creating Sites4.6.3.5. Setting IIS Properties4.6.3.6. Setting the ASP.NET Compilation Directory4.6.3.7. Further Information for Shared Hosting4.7. Shared Configuration4.8. Installing IIS 7.0 on Windows Vista4.8.1. IIS 7.0 Support4.8.2. IIS 7.0 Installation4.9. Summary

5.1. Key Characteristics5.2. IIS Manager5.2.1. Appearance5.2.2. Feature Scopes5.2.3. Features View5.2.3.1. List Pages5.2.3.2. Property Grid Pages5.2.3.3. Dialog Pages5.2.3.4. Web-Site- and Application-Specific Settings5.2.4. Content View5.2.5. Feature Delegation5.3. IIS Manager Extensibility5.4. Configuration Settings5.4.1. Configuration File Hierarchy5.4.2. Configuration Levels5.4.3. Location Tags5.4.4. Configuration File Structure5.4.5. Configuration Schema5.4.5.1. Schema Organization5.4.5.2. configSections5.4.6. Locking and Unlocking Sections5.5. Command-Line Management5.5.1. Using AppCmd.exe5.5.2. Getting Help5.5.3. Using the list Command5.5.3.1. Listing All Object Instances5.5.3.2. Listing Unique Object Instances5.5.3.3. Listing Object Instances by Criteria5.5.3.4. AppCmd.exe Output5.5.3.4.1. Listing Detailed Information5.5.3.4.2. Listing by Property5.5.3.4.3. Listing Configuration Objects5.5.4. AppCmd.exe Attributes and Values5.5.5. Managing Objects with add, delete, and set5.5.5.1. Adding New Objects5.5.5.2. Deleting Existing Objects5.5.5.3. Modifying Existing Objects5.5.6. Determining Which Attributes Are Associated with an Object5.5.6.1. Controlling Object State5.5.6.2. Determining Site and Application Pool State5.5.6.3. Determining Worker Process State5.5.6.4. Monitoring Currently Executing Requests5.5.7. Backing Up and Restoring5.5.7.1. Setting the Configuration5.5.7.2. Listing the Configuration5.5.7.3. Editing Configuration Properties5.5.7.4. Editing Configuration Collections5.5.7.5. Configuration Location5.5.7.6. Locating Configuration Settings5.5.8. Locking and Unlocking the Configuration5.5.9. Piping with XML5.6. Web Management Service and Remote Administration5.7. Summary
6.1. Web Sites, Applications, and Virtual Directories6.1.1. Web Sites6.1.2. Applications6.1.3. Virtual Directories6.2. Creating a New Web Site6.2.1. Creating a Web Site Using IIS Manager6.2.2. Creating a New Application Pool for Your Site6.2.3. Creating a Web Site Using AppCmd6.2.4. Creating a Web Site Using Microsoft.Web.Administration6.2.5. Changes to the applicationHost.config File6.3. Configuring Logging6.3.1. Enabling Logging6.3.1.1. Failed Request Tracing Logs6.3.1.1.1. Enabling Failed Request Tracing Logs Using IIS Manager6.3.1.1.2. Enabling Failed Request Tracing Logs Using AppCmd6.3.1.2. W3C Logging6.3.1.2.1. Enabling W3C Logs using AppCmd6.3.1.2.2. Enabling W3C Logs Using Microsoft.Web.Administration6.3.1.3. Centralized Logging6.3.1.3.1. Centralized Binary Logging6.3.1.3.2. Centralized W3C Logging6.4. Configuring Host Headers6.4.1.6.4.1.1. Adding/Removing Host Headers Using IIS Manager6.4.1.2. Setting Host Headers Using AppCmd6.4.1.3. Setting Host Headers Using Microsoft.Web.Administration6.4.1.4. SSL and Host Headers6.5. Administering Applications6.5.1. Adding Applications Using IIS Manager6.5.2. Adding Applications Using AppCmd6.5.3. Adding Applications Using Microsoft.Web.Administration6.5.4. Deleting Applications Using IIS Manager6.5.5. Deleting Applications Using AppCmd6.5.6. Deleting Applications Using Microsoft.Web.Administration6.6. Administering Virtual Directories6.6.1. Creating Virtual Directories Using IIS Manager6.6.2. Creating Virtual Directories Using AppCmd6.6.3. Adding Virtual Directories Using Microsoft.Web.Administration6.6.4. Removing Virtual Directories6.7. Authentication6.8. Configuring Compression6.8.1.6.8.1.1. Configuring Compression with IIS Manager6.8.1.2. Configuring Compression with AppCmd.exe6.9. Configuring Default Document Settings6.9.1.6.9.1.1.6.9.1.1.1. Reordering a Document6.9.1.1.2. Adding a Default Document6.10. Configuring MIME Settings6.10.1. Adding MIME Types6.10.1.1. Adding MIME Types Using IIS Manager6.10.1.2. Adding MIME Types Using AppCmd6.10.2. Editing MIME Types6.10.2.1. Editing MIME Types Using IIS Manager6.10.2.2. Editing MIME Types Using AppCmd6.10.3. Removing MIME Types6.10.3.1. Removing MIME Types Using IIS Manager6.10.3.2. Removing MIME Types Using AppCmd6.11. Basic Administration Tasks6.11.1. Configuring Default Options for IIS6.11.2. Starting and Stopping Services and Web Sites6.11.2.1. Stopping and Starting Web Services6.11.2.2. Stopping and Starting Web Sites6.11.3. Enabling Dynamic Content—ASP.NET and Classic ASP6.11.4. Isolating Applications6.12. Summary
7.1. Application Administration7.2. ASP7.3. ASP.NET7.3.1. IIS 6.0 and Previous Architecture7.3.2. IIS 7.0 Architecture7.3.3. IIS 7.0 and ASP.NET Modules7.3.3.1. .NET Compilation7.3.3.2. .NET Globalization7.3.3.3. .NET Trust Levels7.3.3.4. Application Settings7.3.3.5. Connection Strings7.3.3.6. Machine Keys7.3.3.7. Pages and Controls7.3.3.8. Providers7.3.3.9. Session State7.3.3.9.1. Modes7.3.3.10. Cookie Settings7.3.3.10.1. Auto Detect7.3.3.10.2. Use Cookies7.3.3.10.3. Use Device Profile7.3.3.10.4. Use URI7.3.3.11. Configuring Session State7.3.3.12. SMTP e-Mail7.4. ISAPI7.5. CGI7.6. FastCGI7.6.1. Installing PHP7.6.2. Installing QDig7.6.3. Installing FastCGI Module7.6.4. Enabling FastCGI for Use with PHP7.7. Windows Process Activation Service7.8. Summary
8.1. A Background of Web-Site Separation8.2. Defining Applications8.3. Comparing Virtual Directories to Applications8.4. Understanding the w3wp.exe Process8.4.1. Recycling Application Pools8.4.2. Web Gardens8.5. Working with Application Pools8.5.1. Creating Application Pools8.5.2. Managing Settings8.5.3. Assigning Applications and Sites to Application Pools8.5.3.1. Three Folder Right-Click Choices8.5.3.2. AppCmd Method8.5.3.3. applicationHost.config8.5.3.4. Microsoft.Web.Administration8.5.4. Specifying the .NET Framework Version8.5.5. Specifying the Managed Pipeline Mode8.5.5.1. Classic Mode8.5.5.2. Integrated Mode8.5.5.3. Configuration Differences between Modes8.5.6. Managing Active Application Pools8.5.6.1. Viewing Running Processes in IIS 7.08.5.6.2. Viewing Running Processes in Task Manager8.5.6.3. Viewing Running Processes using AppCmd.exe8.5.6.4. Viewing Running Page Requests8.5.6.5. Starting, Stopping, and Recycling Application Pools8.6. Application Pool Security8.6.1. Application Pool Configuration Isolation8.6.2. Application Pool SID Injection8.6.3. Site Anonymous User8.7. Noteworthy Advanced Settings8.7.1. Bitness8.7.2. CPU Limits8.7.3. Processor Affinity8.8. Application Pool Users8.8.1. Network Service Account8.8.2. Local Service Account8.8.3. Local System Account8.8.4. Custom User Account8.9. Summary
9.1. Introducing the Main Characters9.1.1. Server Administrator9.1.2. Site Administrator9.1.3. The Two Shall Work as One9.2. IIS Manager Remote Access9.2.1. Installing the IIS 7.0 Management Service9.2.2. Enabling Remote Connections9.2.3. Authentication Types9.2.3.1. IIS Manager Authentication9.2.3.2. Windows Authentication9.2.3.3. Build Your Own9.2.4. Authorization at Three Levels9.2.4.1. Server Level Authorization9.2.4.2. Site and Application Level Authorization9.2.5. Remote Installation and Usage9.2.5.1. Connecting to the Server/Site/Application9.2.5.2. Connecting to IIS 7.0 Remotely9.2.6. Extending IIS Manager9.3. Delegation Settings9.3.1. Delegation of Sections9.3.1.1. Default Delegation versus Custom Web Site Delegation9.3.1.2. <section> Settings9.3.1.3. The Role of the Configuration Files9.3.1.4. Customizing Application Folders Using Location Tags9.3.1.5. Where Settings Are Applied9.3.1.6. IIS Manager9.3.1.6.1. Read Only9.3.1.6.2. Read/Write9.3.1.6.3. Not Delegated9.3.1.6.4. Configuration Read/Write and Read Only9.3.1.6.5. Reset to Inherited9.3.1.6.6. Reset All Delegation9.3.1.6.7. Copy Delegation9.3.1.7. AppCmd.exe and Delegation9.3.2. Delegating the Small Details9.3.2.1. Elements/Collections/Attributes9.3.2.2. Locking Attributes9.3.2.3. Locking Elements9.3.2.4. Locking Collections9.3.2.5. Locking Individual Items9.3.2.6. Locking All Attributes and Elements Except Those You Specify9.4. Summary
10.1. FTP — Shipping Version10.1.1. FTP Basics10.1.1.1. User Isolation10.1.1.1.1. Do Not Isolate Users10.1.1.1.2. Isolate Users10.1.1.1.3. Isolate Users Using Active Directory10.1.1.2. Directory Structure10.1.1.2.1. Structure if You Do Not Isolate Users10.1.1.2.2. Structure if You Isolate Users without Active Directory10.1.1.2.3. Structure if You Isolate Users Using Active Directory10.1.1.3. Installing the FTP Service10.1.1.4. Creating an FTP Site10.1.1.4.1. Setting Site Properties10.1.2. Automating FTP Site Creation and Management10.1.2.1. IISFtp.vbs10.1.2.1.1. Creating and Managing FTP Sites Using IISFTP.VBS10.1.2.1.2. Configuring Active Directory Isolation Using IISFTP.VBS10.1.2.1.3. Examples10.1.3. The FTP Command-Line Client10.2. FTP 710.2.1. Installing FTP 710.2.2. Creating a New FTP 7 Site10.2.3. Adding an FTP 7 Site to an Existing Web Site10.2.4. Configuring FTP 7 Security10.2.5. Configuring FTP 7 over SSL10.2.6. Configuring FTP 7 User Isolation10.2.7. Configuring FTP 7 Host Name Support10.2.8. Administering FTP 7 with Configuration Files10.2.8.1. Adding FTP Publishing to a Web Site10.2.8.2. Adding FTP over SSL to an Existing Site10.2.8.3. Configuring Host Name Support10.2.8.4. Testing FTP with Telnet10.3. FrontPage Server Extensions10.3.1. Installing FPSE10.3.2. Adding FPSE to a Web Site10.3.3. Configuring FPSE10.3.4. Securing an FPSE-Extended Web Site10.3.5. Connecting Using a Client10.3.6. Uninstalling FPSE10.4. SMTP10.4.1. How SMTP Works10.4.2. Installing SMTP10.4.3. Configuring the Default SMTP Server10.4.3.1. General Settings10.4.3.2. Messaging Limit Configurations10.4.3.3. Delivery Configurations10.4.3.4. LDAP Routing10.4.4. SMTP Security and Authentication10.4.4.1. Authentication10.4.4.2. TLS Encryption10.4.4.3. Connection Control10.4.4.4. Relay Restrictions10.4.5. Configuring Additional Domains10.4.6. SMTP Folders10.4.6.1. Badmail10.4.6.2. Drop10.4.6.3. Pickup10.4.6.4. Queue10.4.7. Testing and Troubleshooting SMTP10.4.7.1. Testing with Telnet10.4.7.2. SMTP Log Files10.4.7.2.1. Configuring SMTP Logging10.4.7.2.2. Interpreting SMTP Logs10.5. LogParser10.5.1.10.5.1.1. Installing LogParser10.5.1.2. LogParser Command Line10.5.1.3. LogParser Examples10.5.1.3.1. Files Not Found10.5.1.3.2. Daily Bandwidth Use10.5.1.3.3. Maximum Time Taken10.5.1.3.4. File Leaching10.5.1.3.5. Additional Examples10.6. Summary
11.1. Background11.2. Core Server and Modules11.2.1. HTTP Modules11.2.1.1. Native Modules11.2.1.1.1. HTTP Modules11.2.1.1.2. Security Modules11.2.1.1.3. Content Modules11.2.1.1.4. Compression Modules11.2.1.1.5. Caching Modules11.2.1.1.6. Logging and Diagnostics Modules11.2.1.1.7. Extensibility Support Modules11.2.1.2. Managed Modules11.3. Server Workload Customization11.3.1. Eliminating Overheads11.3.2. A Basic Real-World Example11.3.3. A More Complex Real-World Example11.3.4. Customizing Individual Web Sites11.3.5. Customization Using IIS Manager11.4. ASP.NET and the IIS Pipeline11.4.1. Configuring ASP.NET Execution Mode11.4.1.1. Selecting the Execution Mode11.4.1.2. Setting an Application to Run in Legacy or Integrated Mode11.4.2. Migrating Legacy ASP.NET Applications to IIS 7.011.4.3. Selecting the ASP.NET Version11.5. Legacy ISAPI Support11.6. Summary
12.1. Extensibility Overview12.2. IIS Module Concepts12.2.1. Events12.2.2. Notifications12.2.3. Return Codes12.2.4. Notification Priority12.3. An Example Native Module12.3.1. Native Module Design12.3.2. Native Module Creation12.3.2.1. Including SDK Files12.3.2.2. Creating a New Project12.3.2.3. Defining the HttpModule Class12.3.2.4. Exporting the RegisterModule Method12.3.2.5. Registering for Event Notifications12.3.2.6. Implementing the Notification Method(s)12.3.2.7. Setting Notification Priority12.3.2.8. Building the Module12.3.2.9. Installing the Module12.3.2.10. Testing the Module12.3.3. Native Module Wrap-Up12.4. Managed Code Modules12.4.1. Managed Event Notifications12.4.2. Further Reading12.5. An Example Managed Module12.5.1. Managed Module Design12.5.2. Managed Module Creation12.5.2.1. Defining the IHttpModule Interface12.5.2.2. Registering for Notifications12.5.2.3. Implementing the Notifications12.5.2.4. Installing the Module12.5.2.5. Testing the Module12.5.3. Managed Module Wrap-Up12.6. Event Tracing from Modules12.6.1. Adding Tracing Support to a Managed Code Module12.6.1.1. Including a Namespace Reference12.6.1.2. Declaring a Global TraceSource Variable12.6.1.3. Initializing the TraceSource Object12.6.1.4. Adding Trace Events12.6.1.5. Compiling and Deploying the Module12.6.1.6. Adding a Trace Listener to IIS12.6.1.7. Enabling Tracing and Routing Trace Events to IIS12.6.1.8. Viewing Trace Results12.7. Extending IIS Configuration12.7.1. Adding Configuration Support to Custom Modules12.7.1.1. Extending the Schema12.7.1.2. Registering the Extension with IIS Config12.7.1.3. Creating the Configuration Entry12.7.1.4. Accessing Configuration Information12.7.1.5. Including the Namespace Reference12.7.1.6. Defining a Global Configuration Variable12.7.1.7. Extracting the Configuration Attribute12.7.1.8. Adding Processing Logic12.7.1.9. Installing and Testing the Module12.8. Extending the IIS Administration Tool12.8.1. Creating an IIS Administration Tool Extension12.8.1.1. Creating a New Project12.8.1.2. Adding Namespace References12.8.1.3. Creating the Configuration Control12.8.1.4. Creating an IIS Administration Tool Module Container12.8.1.5. Build and Install12.8.1.6. Viewing the Result12.9. Summary
13.1. What Is Security?13.1.1. Managing Risk13.1.2. Security Components13.2. Types of Attacks13.2.1. Denial-of-Service Attacks13.2.2. Privilege Escalation Attacks13.2.3. Passive Attacks13.3. Securing the Server13.3.1. Securing the Environment13.3.2. IPsec (IP Security)13.3.3. Network Access Protection13.3.4. Active Directory Federation Services13.4. Securing IIS 7.013.4.1. IP and Domain Restrictions13.4.1.1. Default Policy and Domain Name Restrictions13.4.1.2. Configuring Rules13.4.1.3. Rule Priority13.4.1.4. Comparing IP and Domain Name Restrictions13.4.2. Configuring MIME-Type Extensions13.4.2.1. Adding a New MIME Type13.4.2.2. Removing an Existing MIME Type13.4.2.3. Configuring MIME Types using AppCmd13.4.3. Configuring ISAPI Extensions and CGI Restrictions13.4.3.1. Adding a New ISAPI Extension or CGI Restriction13.4.3.2. Changing Default Settings13.4.3.3. Configuring ISAPI and CGI Restrictions with AppCmd13.4.3.4. Additional Configuration for ISAPI Extensions and CGI Applications13.4.4. Configuring Request Filtering13.4.4.1. Filtering by File Extension13.4.4.2. Filtering by HTTP Verb13.4.4.3. Configuring Request Limits13.4.4.4. Filtering by URL Sequence13.4.4.5. Filtering by Segment13.4.4.6. Request Filtering Logging13.4.5. Application Layer Security13.4.6. Configuring Logging13.5. Summary
14.1. Authentication in IIS 7.014.1.1. How IIS 7.0 Authenticates a Client14.2. Configuring Anonymous Authentication14.3. Configuring Basic Authentication14.4. Configuring Digest Authentication14.5. Configuring NTLM Authentication14.5.1. Configuring Kerberos Authentication14.5.1.1. How Kerberos Authentication Works14.5.1.2. Service Principal Names14.5.1.3. Enabling Kerberos Authentication14.6. Configuring UNC Authentication14.7. Configuring Client Certificate Authentication14.8. Configuring Forms-Based Authentication14.8.1. Forms-Based Authentication14.9. Configuring Delegation14.10. Configuring Protocol Transition14.11. Configuring Authorization14.11.1. URL Authorization14.11.1.1. Configuring the Managed (ASP.NET) URL Authorization Module14.11.1.2. Configuring the Native (IIS 7.0) URL Authorization Module14.11.2. Configuring Application Pool Sandboxing14.12. Understanding IIS 7.0 User Accounts14.13. Summary
15.1. Securing a Web Site with TLS15.1.1. The SSL/TLS Handshake15.1.2. Generating a Certificate Request15.1.3. Submitting the Certificate Request15.1.4. Importing the Certificate into IIS 7.015.1.5. Configuring Web-Site Bindings15.1.6. Generating a Certificate Using Domain Certificate Request15.1.7. Generating a Self-Signed Certificate15.1.8. Managing an SSL/TLS-Secured Web Site15.1.8.1. Configuring Additional SSL/TLS Options15.1.8.2. Exporting and Importing Certificates15.1.8.3. Configuring SSL and HTTP Host Headers15.1.9. Managing a PKI15.2. Securing an SMTP Virtual Server with TLS15.3. Securing an FTP Site with TLS15.4. Summary
16.1. IIS 7.0 and Web Farms16.1.1. Shared Configuration16.1.1.1. Exporting the Configuration Files16.1.1.2. Relocating the Configuration Files16.1.1.3. Creating Machine-Neutral Configuration Files16.1.1.3.1. ACLs16.1.1.3.2. Environment Variables16.1.1.3.3. Handling IP Addresses16.1.1.3.4. Diversified web.config files16.1.1.3.5. configSource16.1.1.3.6. childSource16.2. Content Configuration16.2.1. Local Content16.2.2. Shared Network Content16.2.3. Shared SAN Content16.3. Content Replication16.3.1. Distributed File System16.3.1.1. DFS Replication16.3.1.2. DFS Namespaces16.3.1.3. DFSR and the IIS Configuration Files16.3.1.4. DFSR and Content Replication16.3.2. Robocopy16.3.3. Offline Folders16.3.4. Additional Tools16.3.5. Microsoft Web Deployment Tool16.4. Complete Redundancy16.5. Load Balancing16.5.1. Network Load Balancer (NLB)16.5.2. Round-Robin DNS Load Balancing16.5.3. Third-Party Load Balancing16.6. Other Considerations16.6.1. Replication16.6.1.1. SSL Certificates16.6.1.2. Registry Settings16.6.1.3. GAC16.6.1.4. Installing IIS Features and Third-Party Tools16.6.1.5. COM+16.6.2. .NET Configuration Files and machineKey16.6.3. Session State16.6.3.1. InProc16.6.3.2. StateServer16.6.3.3. SQLServer16.6.3.4. Custom16.6.3.5. Off16.6.4. Security16.6.4.1. CAS16.7. Summary
17.1. Direct Configuration17.1.1. Configuration File Hierarchy17.1.2. Order of Operation17.1.3. Collection Items17.1.4. Section Structure17.1.4.1. applicationHost.config17.1.4.2. administration.config17.1.4.3. redirection.config17.1.4.4. machine.config17.1.4.5. web.config (Root)17.1.5. location Tag17.1.6. Inheritance17.1.7. Locking17.1.8. childConfig/sourceConfig17.1.9. Configuration Path17.1.10. Schema Extensibility17.2. Programmatic Configuration17.2.1. My First IIS 7.0 Programming Walkthrough17.2.1.1. System Requirements17.2.1.2. Getting Started with Visual Web Developer17.2.1.3. Designing the Web Form17.2.1.4. Writing the Code17.2.1.5. Running the Create Web Site Web Site17.2.2. Microsoft.Web.Administration (MWA)17.2.2.1. Configuration Classes17.2.2.2. Dynamic Runtime Classes17.2.2.3. Accessing a Remote Server17.2.2.4. Direct Attribute and Element Editing17.2.2.5. Dealing with location Tags17.2.3. Microsoft.Web.Management (MWM)17.2.4. ABO, ADSI, and Legacy API Support17.2.5. IIS 7.0 WMI Provider17.2.5.1. CIM Studio17.2.5.2. WMI Walkthrough17.2.6. AHAdmin17.3. Summary
18.1. Management Approaches and Principles18.1.1. ITIL Standards18.1.2. MOF: Microsoft's ITIL Superset18.1.3. Applying MOF to IIS Operations Management18.1.3.1. Role-Based Administration18.1.3.2. Change Management18.1.3.3. MOF Example: Change Management for Emergency Updates18.1.3.3.1. Appoint CAB Members18.1.3.3.2. Notify CAB Members18.1.3.3.3. CAB Members Review the Request for Change18.1.3.3.4. CAB Members Vote on the RFC18.1.3.4. MOF Example: Change Management for Applying Hotfixes18.2. Operational Tasks18.2.1. Backup and Restore Program18.2.1.1. Backup Scope18.2.1.2. Back-up Methods and Media18.2.1.3. Approaches18.2.1.3.1. Low Service Expectations18.2.1.3.2. Moderate Expectations18.2.1.3.3. High Availability18.2.1.4. Conducting Backups18.3. Summary
19.1. Monitoring Web Sites19.1.1. How to Monitor IIS 7.019.1.1.1. Task Manager19.1.1.1.1. Managing Services from Task Manager19.1.1.1.2. Managing Performance from Task Manager19.1.1.2. New Command-Line Tools19.1.1.3. Reliability and Performance Monitor19.1.1.3.1. Performance Monitor19.1.1.3.2. Reliability Monitor19.1.1.3.3. Data Collector Sets19.1.1.3.4. Reports19.1.2. What to Monitor19.1.2.1. Memory Usage19.1.2.2. Processor Utilization19.1.2.3. Disk I/O19.1.2.4. Network Bandwidth19.1.2.5. Web Service Counters19.1.2.6. ASP.NET Counters19.1.2.7. Centralized Binary Logging19.2. Performance Tuning19.2.1. Operating System Optimizations19.2.1.1. Disable Unnecessary Services19.2.1.2. Application Performance19.2.1.3. TCP Stack Tuning Options19.2.1.4. Storage Tuning Options19.2.2. IIS Service Optimizations19.2.2.1. Http.sys19.2.2.2. Application Pool Optimizations19.2.3. Web-Site Optimizations19.2.3.1. HTTP Page Headers19.2.3.1.1. HTTP Keep-Alives19.2.3.1.2. Content Expiration19.2.3.1.3. Enabling HTTP Header Tuning19.2.3.2. Bandwidth Throttling19.2.3.3. Output Caching19.2.3.4. HTTP Compression19.2.3.5. Web-Site Connections19.3. Summary
20.1. Types of Issues20.1.1. Specific Errors20.1.2. Hang/Time-out Issues20.1.3. Resource-Intensive and Slowness Issues20.2. Runtime Status and Control API (RSCA)20.2.1. Viewing Worker Processes20.2.2. Viewing Page Requests20.2.3. Viewing Application Domains20.3. IIS 7.0 Error Pages20.3.1. Customizing Custom Error Pages20.3.2. Multiple Language Support20.3.3. HTTP Status Codes20.3.4. FTP Status Codes20.4. Failed Request Tracing20.4.1. Failed Request Tracing Rules Setup20.4.1.1. Specify Content to Trace20.4.1.2. Define Trace Conditions20.4.2. Select Trace Providers20.4.3. Reading the XML Trace Logs20.5. Logging20.6. ASP.NET Tracing20.6.1. Enabling ASP.NET Tracing20.6.2. The ASP.NET Trace Viewer20.6.2.1. Accessing the ASP.NET Trace Viewer20.6.2.2. Password Protecting the ASP.NET Trace Viewer20.6.2.3. Extending Output Data20.7. Troubleshooting Tips20.7.1. Reproduce20.7.2. Isolate20.7.2.1. Reproduce Trick20.7.2.2. Fail Trick20.7.2.3. Only 1 Trick20.7.2.4. Binary Halves Isolation Trick20.7.2.5. All but 1 Trick20.7.3. Fix20.7.4. Test20.8. Additional Built-in Tools20.8.1. Task Manager20.8.2. Event Viewer20.8.2.1. Attach Task to This Event20.8.2.2. Applications and Services Logs20.8.2.3. Subscriptions20.8.2.4. Custom Views20.8.3. Reliability and Performance Monitor20.8.3.1. Resource Overview20.8.3.2. Performance Monitor20.8.3.3. Reliability Monitor20.8.3.4. Logging Historical Data to Disk20.8.3.4.1. User Defined Data Collector Sets20.8.3.4.2. System Data Collector Sets20.8.3.4.3. Creating a Template from Real-Time Counters20.8.3.4.4. Reports20.8.3.4.5. Perfmon /Report20.8.3.4.6. Alerts and Threshold Starts20.8.3.4.7. Viewing Logged Data20.8.3.5. Overlaying Multiple Servers20.8.4. Logging NTFS Failures to Disk20.8.5. Ping/Tracert/Pingpath20.8.5.1. Ping20.8.5.2. Tracert20.8.5.3. PathPing20.8.6. Telnet20.9. Installable Tools20.9.1. IIS 6.0 Resource Kit Tools20.9.1.1. IISState20.9.1.2. WFetch20.9.1.3. Web Capacity Analysis Tool (WCAT)20.9.1.4. Log Parser20.9.2. DelegConfig20.9.3. Process Explorer20.9.4. IIS Diagnostics Toolkit20.9.4.1. SSLDiag20.9.4.2. DebugDiag20.9.4.3. TraceDiag20.9.5. ELMAH20.9.6. Where to Go Next20.10. Summary
A.1. Utility ModulesA.2. Managed Engine: ASP.NET IntegrationA.3. IIS 7.0 Native ModulesA.4. Managed Modules
B.1. HTTPB.1.1. 1xx—InformationalB.1.2. 2xx—SuccessB.1.3. 3xx—RedirectionB.1.4. 4xx—Client ErrorB.1.5. 5xx—Server ErrorB.2. FTPB.2.1. 1xx—Positive Preliminary ReplyB.2.2. 2xx—Positive Completion ReplyB.2.3. 3xx—Positive Intermediate ReplyB.2.4. 4xx—Transient Negative Completion ReplyB.2.5. 5xx—Permanent Negative Completion Reply
C.1. Service-Oriented ApplicationsC.2. WCF and ASP.NET Web ServicesC.3. WAS and WCFC.4. Configuring a WCF Application
D.1. IIS Product Group ResourcesD.2. IIS Public NewsgroupsD.3. Standards DocumentsD.4. BlogsD.5. Microsoft DocumentationD.6. Third-Party Products and ToolsD.7. Security Documentation

Content preview from Professional IIS 7.0

Chapter 9. Delegating Remote Administration

Many web environments have a need to separate the roles of the system administrators and the web site development and management teams. Whether there are two people in these roles or hundreds, it is necessary for the server administration team to specify the access level and settings for the developers or deployment teams.

In past versions of IIS, the ability to delegate partial administration of a server, web site, or application was very limited. Unless you developed your own tools, it was not possible to configure partial access to the end developers or administrators.

In the area of delegation, IIS 7.0 breaks revolutionary ground in two areas. First, IIS administrators can specify the access the web site administrators should have and provide the IIS Manager tool for them to manage their settings remotely through a user-friendly interface. Second, this same access in IIS Manager also applies to the web.config file. This may seem strange at first because the web.config file used to be for ASP.NET, and it wasn't possible to manage IIS from any type of control file. The advantages of managing some IIS features from the web site's web.config file are huge, the most prominent benefit being that web site tool vendors and developers can create web sites and then copy them using a simple tool like XCopy or FTP.

Delegation isn't just turning on a switch and allowing developers or web site administrators to start work. It requires a lot of planning ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Start your free trial

Publisher Resources

ISBN: 9780470097823Purchase book

Professional IIS 7.0

by Ken Schaefer, Jeff Cochran, Scott Forsyth, Rob Baugh, Mike Everest, Dennis Glendenning

Chapter 9. Delegating Remote Administration

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

You might also like

Professional C# 5.0 and .NET 4.5.1

How to Cheat at IIS 7 Server Administration

Internet Information Services (IIS) 7.0 Administrator’s Pocket Consultant

Internet Information Services (IIS) 7.0 Resource Kit

Publisher Resources

Chapter 9. Delegating Remote Administration

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,and much more.

You might also like

Professional C# 5.0 and .NET 4.5.1

How to Cheat at IIS 7 Server Administration

Internet Information Services (IIS) 7.0 Administrator’s Pocket Consultant

Internet Information Services (IIS) 7.0 Resource Kit

Publisher Resources

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.