Confguring Web Server (IIS)

TOPIC 10:
CONFIGURING WEB SERVER (IIS)
ITP4112 Network and Virtualized Systems
Administration Project

VTC 2012
 LESSON INTENDED LEARNING OUTCOMES
On completion of the lesson, students are expected to:
Know how to install the Web Server of IIS.

Confguring Web Server (IIS)

Know how to configure the Web Server of IIS.

Note: the full name of IIS is Internet Information Service

VTC 2012
 OVERVIEW
The IIS 7.0 services provided by Windows Server 2008 integrates a
number of content delivery platforms, including IIS (web services),
ASP.NET, and SharePoint services, into one easy-to-manage web pl
atform.
Overall, IIS 7.0 provides a scalable, easily managed, and secure we

Confguring Web Server (IIS)

b server and application server environment.
To add the IIS role to a server running Windows Server 2008, use t
he Add Roles Wizard, which can be started via the Server Manager.
Before installing IIS on a server, you must configure the computer
with a static IP address. Also, you should install IIS on an NTFS vol
ume, which enables you to secure IIS resources files with the stro
nger NTFS permissions.
Finally, running other services on the IIS server can also potentiall
y lead to security leaks that could compromise the web server and
the entire network (in addition to the consideration of workload fr
om web hits). 3

VTC 2012
 Confguring Web Server (IIS)
4
INSTALL IIS

VTC 2012
 INSTALL IIS
You are provided a list of the IIS services that can be ins
talled as part of the Web Server role.
For now, install the default services (services such as th
e FTP service can be added later).

Confguring Web Server (IIS)

5

VTC 2012
 CONFIGURE THE IIS SERVER
IIS is managed through the IIS Manager snap-in in the Ser
ver Manager by expanding the Roles and IIS Server nodes.
The snap-in also monitors the IIS service by showing even
ts being logged that are related to IIS.

Confguring Web Server (IIS)

6

VTC 2012
 ADD A WEBSITE
When you expand the Web Server node and then expand t
he Site node, you can view the sites currently on the server
. By default, only the new Default Web Site is listed in the S

Confguring Web Server (IIS)

ites pane.

VTC 2012
 ADD A WEBSITE
You can use the Default Web Site as the site on the web ser
ver is you wish. You can rename the site as needed (right-cl
ick the site and select Rename).

Confguring Web Server (IIS)

When you install the IIS services on your server, a default f
older, \Inetpub\Wwwroot, is created on your system drive
for the Default Web Site. You can use this folder as the loca
tion for your published web content or you can create ano
ther location.
Alternatively, you can create a new site.
There are configuration settings that affect all the websites
created on the IIS server, and then there are settings for e
ach website that you create.
8

VTC 2012
 ADD A WEBSITE
After clicking the Sites node in the node tree, click the Add
Web Site in the Actions pane.
Type a unique, friendly name for the site. As you type the

Confguring Web Server (IIS)

name, an application pool for the site is created with the s
ame name. The application pool is configured to use the .
NET Framework by default and settings of the site can be
edited after its creation.
In the Physical Path box, type the path where you want to
store the site content.
By default, the server uses pass-through authentication as
the connection method to the above physical path. This m
eans the server uses the credentials of the requesting use
9
r to access the physical path.

VTC 2012
 ADD A WEBSITE
In the Binding area, set the protocol type, the IP address, a
nd the port. Select an IP address for the site in the drop-do
wn list or type one.
If you want to have web clients connect to the site by host
name (domain name) rather than the IP address, provide t

Confguring Web Server (IIS)

he hostname for the site (e.g. www.cwcim.org).

The new site will be

added to the Sites list in
the IIS Manager. You
will get an error when
you attempt to connect to
the site until a default
web page is confgured
for the site.

10

VTC 2012
 CONFIGURE IIS DEFAULTS
Global settings for all the sites on your IIS server.
For example, physical path credentials, connection limits, a
nd enabled protocols.
To set these defaults, select the Sites node in the Connectio

Confguring Web Server (IIS)

ns pane of the IIS Manager, and click the Set Web Site Defa
ults in the Actions pane.

11

VTC 2012
 CONFIGURE IIS DEFAULTS
Application Pool dictates the application platform avai
lable on the server. The default DefaultAppPool actuall
y is the .NET Framework.

Confguring Web Server (IIS)

To access the same
settings for a specifc
site, select the site in
the Connections tree,
and then click
Advanced Settings in
the Actions pane.

12

VTC 2012
 CONFIGURE SITE FEATURES
Settings you make for a specific site override the setting
s that you made at the global level.

Confguring Web Server (IIS)

13

VTC 2012
 CONFIGURE SITE FEATURES
You are provided with a set of icons in the Details pane. This
is the default Features View, which provides a task-based sy
stem for configuring specific settings required for a particul
ar website.

Confguring Web Server (IIS)

The settings available for a site range from authentication t
o directory browsing to the SSL settings for HTTPS protocol.
Some of these settings are quite straightforward and are ba
sically enabled by default.
To access a settings page, double-click the icon in the Featur
es View.
All the settings in relation to a specific site can also be set at
the server level. Then, the settings are inherited by each site
on the server. To do this, click the server name in the Conne
ctions pane and then use the icons similarly. 14

VTC 2012
 SITE FEATURE - AUTHENTICATION
By default, the authentication for a site is set to anonymous, i
.e. does not require a username or password for the clients
web browser to connect to the site.

Confguring Web Server (IIS)

To edit this setting, double click the Authentication icon and cl
ick Anonymous Authentication in the Details pane, and then c
lick Edit in the Actions pane.

15

VTC 2012
 SITE FEATURE - AUTHENTICATION
To set specific user credentials (other than the default IUSR,
which is created when you install IIS), click the Set button an
d provide the username and password

Confguring Web Server (IIS)

It is best to use the default IUSR account for anonymous acc
ess. Specifying an account or using the Application Pool Iden
tity setting gives anonymous users any administrative rights t
hat the account you choose might have, this can be a securit
y risk to the server.

16

VTC 2012
 SITE FEATURE - LOGGING
The logging page enables you to configure how requ
ests to the site are logged.

Confguring Web Server (IIS)

You can specify the format of the log file, the directo
ry where the log file should be stored, and the log fil
e rollover schedule.
The default log file format is W3C, which is an ASCII t
ext file format; and allows you to select the fields tha
t are logged.
After you configure the logging for the site, you can v
iew the log file from the IIS Manager snap-in: double
click the Logging icon, then click the View Log Files li
17
nk.

VTC 2012
 SITE FEATURE - LOGGING

Confguring Web Server (IIS)

18

VTC 2012