Windowsbased Hosting Enhancements

1
Windows-based Hosting Enhancements

• Microsoft Windows Server 2003 Service Pack 1
• Internet Information Services (IIS) Tools

2
Why Are We Releasing Windows Server 2003 Service
Pack 1?

• To simplify securing Microsoft Windows Server
  2003 servers
• To further reduce the attack surface
• To provide a more robust and secure operating
  system to customers through new security
  enhancements
• Setup Protection
• Windows Firewall
• Role-based Secure Configuration Wizard

3
Why a Hoster Should Care

• Enhanced Reliability Update and anticipate to
  prevent unplanned downtime
• Enhanced Security
• Stronger defaults and reduced privilege on
  services
• Remote procedure call (RPC)
• DCOM
• Support for no execute hardware
• Intel
• AMD
• Windows Firewall
• Security Configuration Wizard
• Virtual Private Network (VPN) Quarantine Client
  inspection
• Fix-up
• Isolation
• IIS 6.0 Metabase Auditing
• Enhanced Performance Role-based security
  template gives 10 improvement

4
IIS Improvements with Windows Server 2003 SP1

• W3C Centralized Logging
• Fully conforms to standards
• Uses W3C Extended log file format
• Metabase Auditing
• Change an audit access control entry (ACE)
• Track what was changed by whom and when in the
  Security event log

5
IIS Tools
6
Overview of IIS Tools
Available with the Microsoft Solution for
Windows-based Hosting, IIS tools let you

• Identify and isolate problems as they occur
• Solve problems before customers call

Internet Information Server (IIS) Tools
IIS6 Reqmon

• IIS6 Trace

7
Enhanced Monitoring and Diagnostics
IIS Trace

• Adds additional request-based tracing support for
  IIS 6.0
• Enables hosters to trace requests through IIS,
  pin-pointing failures quickly and effectively
• Adds customizability you can
• Specify which providers report events to Event
  Tracing for Windows (ETW)
• Customize how much trace data providers report to
  ETW
• Determine which URLs to trace, thereby focusing
  your troubleshooting efforts on a specific
  application

8
Enhanced Monitoring and Diagnostics

• IIS Request Monitor
• See a snapshot
• Provides real-time view of currently active
  requests within IIS, including their state
  (including start time)
• Find the slow process
• Lets you diagnose which requests/customers/pages
  are the source of the problem
• Fix it faster
• Reduces time to identify and resolve issues
• View the complete path
• Follows a request end-to-end throughout the
  system, letting you diagnose failures and track
  performance-timings