The Agenda. IIS Administration for the Reluctant Webmaster. Jason Helmick Senior Technologist

Transcription

1 IIS Administration for the Reluctant Webmaster Jason Helmick Senior Technologist Level: Intermediate The Agenda Understanding and installing IIS Managing your first website Working with application pools Adding additional websites Additional configurations Securing IIS Using certificates and SSL IIS provisioning and automation

2 UNDERSTANDING AND INSTALLING IIS The workings of IIS

3 IIS Infrastructure Installing using the GUI

4 Installing using PowerShell Server 2012 Install Windowsfeature Web Server Check for errors PS> Get EventLog LogName System Source IIS* EntryType Error Export Csv c:\iiserrors.csv Demonstration

5 MANAGING YOUR FIRST WEBSITE The IIS Manager GUI PS> Start Process Inetmgr

6 The IIS Manager GUI IIS Management PowerShell PS> Import Module WebAdministration PS> Get Command Module WebAdministration PS> Get Command noun web* PS> Get Help *web* PS> Get WebSite Name Default* PS> Get Childitem Path iis:\sites

7 The IIS file System The default documents

8 Normal folders Virtual directory's

9 Web Applications Demonstration

10 WORKING WITH APPLICATION POOLS Application Pools

11 Application Pool settings Application Pools settings PowerShell

12 Application Pool recycling Recycle settings

13 Application Pool recycling PS> Get WmiObject Win32_Process filter name= w3wp.exe PS> Get WmiObject win32_process filter 'name="w3wp.exe"' Select Object Name, PS> Restart WebAppPool Name BikeTestPool Demonstration

14 ADDING ADDITIONAL WEBSITES Adding additional websites

15 Bindings Demonstration

16 ADDITIONAL CONFIGURATIONS IIS configuration files

17 Compression Directory browsing

18 Error messages Supporting additional platforms and apps

19 The Web Platform Installer Example ASP

20 Logging Checking logs LogParser PS> Get childitem Path C:\inetpub\logs filter *.log recurse PS> Get childitem Path C:\inetpub\logs filter *.log recurse Select String SimpleMatch "21:00 PS> Get childitem Path C:\inetpub\logs filter *.log recurse Select String SimpleMAtch "

21 Demonstration SECURING IIS

22 Anonymous Authentication Anonymous Auth Demo GUI

23 Anonymous Auth Demo PS Get WebConfigurationProperty Filter system.webserver/security/authentication/anonymousauthe ntication PSPath IIS:\ name enabled select Object value Set WebConfigurationProperty Filter system.webserver/security/authentication/anonymousauthe ntication PSPath IIS:\ name enabled Value False PS> Set WebConfigurationProperty Filter system.webserver/security/authentication/anonymousauthe ntication PSPath IIS:\ name enabled Value False Location MySite Windows Authentication

24 Windows Auth Demo GUI Windows Auth Demo PS Add WindowsFeature Web Windows Auth Set WebConfigurationProperty Filter system.webserver/security/authentication/windowsau thentication name enabled Value true Get WebConfigurationProperty Filter system.webserver/security/authentication/windowsau thentication name enabled Location mysite select Object value

25 Basic Authentication Basic Auth Demo GUI

26 Basic Auth Demo PS Add WindowsFeature Web Basic Auth Set WebConfigurationProperty Filter system.webserver/security/authentication/basic Authentication name enabled Value true Set WebConfigurationProperty Filter system.webserver/security/authentication/basic Authentication name enabled Location mysite select Object value Setting NTFS Level Permission

27 Application Pool Security Authorization Rules for.net

28 Forms Based Auth Windows Application Firewall

29 Demonstration USING CERTIFICATES AND SSL

30 Using SSL and certificates Creating the certificate

31 Creating the certificate Setting the cryptographic SP

32 Binding to a site The new certificate store Centralized certificate management No more chasing down expired certs Easy to install and configure PS> Install WindowsFeature Web CertProvider

33 Configuring the store Bindings for the store

34 PowerShell and the store Clear WebCentralCertProvider Disable WebCentralCertProvider Enable WebCentralCertProvider Get WebCentralCertProvider Set WebCentralCertProvider Set WebCentralCertProviderCredential Enabling on remote servers PS C:\> Invoke Command Session $sessions {Install WindowsFeature Web CertProvider} Invoke Command Session $sessions {Set ItemProperty Path HKLM:\SOFTWARE\Microsoft\IIS\CentralCertProvider\ Name Enabled Value 1} Invoke Command Session $sessions {Set ItemProperty Path HKLM:\SOFTWARE\Microsoft\IIS\CentralCertProvider\ Name CertStoreLocation Value \\ServerDC\CertStore} Invoke Command Session $sessions {Set WebCentralCertProvider Password UserName Company\certuser PrivateKeyPassword

35 Bindings on remote computers PS C:\> New WebAppPool Name WebBikez_pool PS C:\> New Website Name WebBikez HostHeader PhysicalPath c:\inetpub\wwwroot ApplicationPool webbikez_pool Ssl port 443 SslFlags 3 force PS C:\> New WebBinding Name "WebBikez" Protocol https Port 443 HostHeader SslFlags 3 Demonstration

36 IIS PROVISIONING AND AUTOMATION What s the idea

37 What are my options? One at a time Deploy/Provision PowerShell automation deployment and provisioning Web Deploy and the Web Farm Framework with Application Request Routing But there s more. Preparing IIS on Multiple servers Use PowerShell Remoting! Add IIS and components Deploy test pages Hyper V 3 Deployments

38 The result New sites and certificates PS> Invoke Command Session $Session {New Item path c:\sites\shopping ItemType directory force} PS> $servers foreach{copy item Path c:\sites\shopping\*.* Destination "\\$_\c$\sites\shopping"} PS> $servers foreach{copy item Path c:\sites\certpfx\*.* Destination \\$_\c$} PS> Invoke command Session $session {certutil p P@ssw0rd importpfx c:\company.loc.pfx} PS> $servers foreach{remove Item Path "\\$_\c$\company.loc.pfx"}

39 Managing remote servers PS>Invoke Command session $Session {Install WidnowsFeature Web Mgmt Service} PS> Invoke Command session $Session {Set ItemProperty Path HKLM:\SOFTWARE\Microsoft\WebManagement\Server Name EnableRemoteManagement Value 1} PS> Invoke Command session $Session {Set Service wmsvc StartupType Automatic} PS> Invoke Command session $Session {start service wmsvc} Load Balancing PS> New NlbCluster HostName s1 InterfaceName Ethernet ClusterName web ClusterPrimaryIP SubnetMask OperationMode Multicast PS> Get NlbCluster HostName s1 Add NlbClusterVip IP SubnetMask PS> Get NlbCluster HostName s1 Add NlbClusterNode NewNodeName s2 NewNodeInterface Ethernet

40 PowerShell Deploy Demo Thank you! Questions? PLEASE fill out the evals Jason Helmick Answers: