Internet Information Services

1
Internet Information Services

• IIS 6

2
Microsoft Internet Information Services
3
Internet

• Large set of locally owned and controlled
  networks
• Small set of high speed data transmission lines
  connect networks
• Common protocol for message transmission (TCP/IP)
• Includes Hypertext Transfer Protocol (HTTP)
• Web Sites
• Web-based application sites
• Consists of more than just the web
• Telnet (Secure and unsecure)
• File Transfer Protocol (FTP)
• E-mail using different protocols (POP3, SMTP)
• Software components utilizing CORBA and .NET
• Internet sites accessible via Uniform Resource
  Locator (URL)
• ltprotocolgt//lthost/server/server_aliasgtltportgt/ltpa
  thgt
• Example http//www.mgt.unm.edu/
• Example ftp//ftp.unm.edu

4
Internet Information Services (IIS)

• Microsoft implementation of web services
  comparable to Suns Apache
• IIS allows organization to establish different
  information technologies for users on the
  Internet organizations Intranet
• IIS is an integrated collection of Internet
  services
• WWW (HTTP, CGI, ASP)
• FTP
• SMTP (Simple Mail Transfer Protocol) POP3 (Post
  Office Protocol)
• NNTP
• .NET Framework/COM Components (DLL, EXE)

5
IIS Installation

• Can be added one of 2 ways
• Add/Remove Programs, Windows Components,
  Application Server, select IIS services (under
  Details)
• Manage Your Server
• Only install those services that will be used
• Extra services degrade performance
• Extra services potentially open security holes
• Can install on
• Any Windows Server (2003, 2000)
• XP Pro
• Windows 2000 Professional
• NOT on XP Home (in theory)

6
Application Server Component Install
7
Manage Your Server Install
8
Manage Your Server Install
9
IIS Administrative Tools

• IIS Snap-In via Microsoft Management Console
  (MMC)
• Used to administer IIS on server
• Remotely access other IIS servers (if have
  permission to access)
• Secure administrative tool
• Administrative Web Site
• Can remotely administer server IIS any
  workstation with web access
• Not installed by default
• Requires SSL
• Least secure method
• Best to configure Virtual Private Network (VPN)
  remotely access server

10
Administering

• For LAN, MMC is good choice.
• For remote machines, Remote Desktop is really the
  best choice. Gives console level access. Client
  is installed on local machine.
• HTML Remote Administration is limited. Cant do
  everything.
• Remote Desktop Web Connection is OK, but might
  need to download ActiveX control over connection
  first.

11
IIS Snap-In
12
IIS Remote Administrative Web Interface
13
(No Transcript)
14
Web Site Port Number
15
Host Header/Server Alias(Web Server)
16
Host Header/Server Alias(DNS Server)
17
Creating a Website

• Create a new application pool in IIS Manager
• Create a new directory under inetpub\wwwroot\siten
  ame
• From IIS Manager, create new website.
• Point it at IP in HOSTS file
• Assign to the Application pool created above
• Create default.aspx in directory
• In browser, navigate to http//site_name

18
Security

• By assigning web sites to pools, each pool can be
  secured separately. One will not spill into
  another.
• Three built-in identities
• Network Service Very few privileges.
• Local Service Same as above can only access
  local resources
• Local System Bad! Has too many privileges.
• Custom User Here you can specify a custom user
  account. It must be part of the IIS_WPG Group to
  be able to control the pool! Best when connecting
  to a separate SQL Server box . Both accounts need
  to be on both machines. No passwords are stored
  anywhere in clear text.
• Check out your IIS logs!
• Unregistered MIME types are given a 404 error
  now. In IIS 5, they where downloaded.

19
Command-Line Options

• VBS files are located in \windows\system32
• Iisapp.vbs Lists web applications
• Iisback.vbs Backups/restores/lists/deletes IIS
  configs
• Iiscnfg.vbs Exports/imports config files.
• Iisext.vbsmanages web extensions
• Iisftp.vbs manages FTP sites
• Iisftpdr.vbs Manages FTP virtual directories.
• Iisvdir.vbs Manages web site virtual
  directories.
• Iisweb.vbs creates/deletes/start/stops websites.

IP Address
Name
location
Create website
20
Metabase

• Instead of binary file, its now a plain text XML
  file
• Automatic versioning of files. History files are
  kept in \windows\system32\inetserv\history
• XML file is read into memory upon startup.
  Changes are first made to memory version then
  flushed to disk.
• Metabase can be backed up and moved to another
  machine
• Iiscnfg /copy can be used to copy an entire
  metabase to another machine. This removes machine
  specific info from the metabase. Great for
  replicating servers in a server farm environment.