Learn Windows IIS in a Month of Lunches

Learn Windows IIS in a Month of Lunches JASON HELMICK II MANNING Shelter Island

contents preface xix about this book xxi acknowledgments xxiii 1 Before you begin 1 1.1 Introducing IIS 2 1.2 What you need before you start 4 Prerequisite knowledge 4 IIS versions 7.0, 7.5, or 8 5 Windows PowerShell 6 1.3 How to use this book 6 One hour at a time 6 Completing the labs 6 MoreLunches.com 7 Ideas to own 7 1.4 Setting up your lab environment 7 The basic environment 8 Extending the basic environment 10 1.5 Taking immediate control over IIS 10 Deploying the web server 12 2.1 Locating and protecting the physical web server 13 Server location matters 13 Protecting the web server with a single firewall 15 Protecting the back-end with multiple firewalls: Working in the middle tier 16 ix

2.2 Installing IIS on Microsoft Windows Server 18 2.3 Installing Installing IIS with Server Manager 19 Performing a rapid installation usingpowershell 22 IIS on Server Core 26 Preparing Server Core for IIS 27 Adding IIS to Server Core 28 2.4 Verifying a successful installation 28 2.5 Lab 31 Testing the default website 29 Checkingfor problems 29 2.6 Ideas to own 31 Exploring and launching a website 33 3.1 Locating website configuration settings 34 Locating website configuration settings using the IIS 34 Locating website configuration settings using manager PowerShell 36 3.2 Creating new web pages for testing and troubleshooting 38 Locating the website pages in the filesystem 38 Making an easy web pagefor testing a website 39 Creating a web page using server variables for better results 41 Default 3.3 Adding new folders and applications in the default website 46 Documents 45 Adding normal folders and content 46 Adding virtual directories for better content control folders to the website 48 47 Adding application 3.4 Opening your first website for business 49 Opening the right ports in the firewall 50 Getting an outside IP address 51 Configuring internet DNS for your website 51 Testing from 3.5 Lab 52 3.6 Ideas to the outside 51 own 54 Managing application pools 56 4.1 Creating and configuring standard application pool settings 57 Locating application pools and settings 57 Creating a new application pool 58 Moving a website or application application pool 61 into an

4.2 Application pool recycling: increasing reliability and 4.3 Lab 69 availability 62 Recycling an application pool 63 Modifying the default recycle settings 65 4.4 Ideas to own 70 Adding more websites to your server 71 5.1 Phase 1: Adding a new website using the IIS manager 73 Step 1: Enter the site name 74 Step 2: Create the application pool 75 Step 3: Set the physicalpath 75 5.2 Phase 2: Uniquely identifying your websites with bindings 76 Defining a unique name by type 78 Defining a unique name by IP address 79 Defining a unique name by port 80 Defining a unique name by host name 81 What happens ifyou create a website with a non-unique binding? 83 5.3 An alternate way: adding a new website using PowerShell 5.4 Lab 85 Step 1: Create the directory for the website files using New-Item 84 Step 2: Make an application poolfor the tuebsite using New-WebAppPool 84 Step 3: Make the new website using New-Website 84 5.5 Ideas to own 87 What every administrator should know about web applications 6.1 Configuring the basics for all applications 89 Locating the IIS configuration files 89 Applying compression to make your web pages faster 91 Setting Default Documents to automatically load web pages 93 Directory Browsingfor file downloads 94 Customizing the error pages 96 6.2 Supporting common web applications 97 Supporting applications running with IIS 6 Compatibility Mode 99 Supporting ASP and ASP.NET applications 100 Supporting CGI applications 102 Supporting PHP applications 102 6.3 Monitoring your applications 103 Search the logs for information and problems 104 EnableFailed Request Tracing 105

6.4 Lab 108 6.5 Ideas to own 110 Securingyour sites and web applications 111 7.1 Controlling who can access your Configuring anonymous access site 112 113 Configuring Windows authentication 115 Using basic authentication 117 7.2 Setting site-level permissions: NTFS 120 Configuring permissionsfor users and groups application pools permissions 125 120 Configuring 7.3 Advanced/Optional access control 128 7.4 Lab 130 Setting authorization rules for ASP.NET applications 128 Forms-based authentication 129 Client certificate authentication 129 7.5 Ideas to own 132 Securing the server 133 8.1 Network protection for IIS 134 What are you worried about'? 134 Firewall security 135 Using the Windows Firewall 138 8.2 Adding additional security 140 Blocking by network: IP and domain restrictions 140 Block common attacks using Request Filtering 142 8.3 Monitoring process for hacking 144 8.4 Lab 146 Loggingfiles 144 Using Process Explorer for IIS 145 8.5 Ideas to own 147 Protecting data with, certificates 148 9.1 Not all certificates are the same 149 Trusted and non-trusted certificates 149 Types of certificates 150 Single and multiple certificates 151 9.2 Implementing certificates on a single IIS server 152 Generating a request 154 Completing a request 156 Exporting/Importing a certificatefor backup and additional web servers 158

9.3 Securing your websites 161 Binding certificates 161 Securing host name (header) SSL 162 Assigning certificates with PowerShell 163 Checkingfor certificate expiration 165 9.4 Lab 166 9.5 Ideas to try on own your 168 sites with FTP and SMTP with US 169 10.1 File transfers 169 Preparing forfit 170 Public-access FIT for anonymous users 171 Isolating users with FTP and SSL 175 10.2 SMTP for email 180 10.3 Lab 182 SMTP relays 180 Installing and configuring SMTP 181 10.4 Ideas to own 183 1 Skating administrative responsibilities through JL remote management 184 11.1 Implementing IIS remote management 185 Installing remote management using the IIS manager 186 Configuring remote management 186 Connecting to a remote webserver 190 11.2 Implementing IIS Remote Management Service on Server Core 191 Installing the Management Service 191 Enabling the Remote Management Service 192 Assign a trusted certificate 192 Starting the Management Service 193 11.3 Delegating access to other administrators 11.4 Lab 197 and developers 193 Configuring permissions for websites and applications 193 Customizingfeature 11.5 Ideas to access 196 own 198 fy Optimizing sites for users and search engines 199 ^ 12.1 Search Engine Optimization Toolkit 200 Installing and using the Search Engine Optimization Toolkit 200 Locating broken site links 201 Preventing non-relevant content from being searched 204

12.2 Improving SEO with URL Rewrite 206 Installing URL Rewrite 206 Shortening long URLs for belter SEO 207 12.3 Using regular expressions to improve 12.4 Lab 217 URL Rewrite 209 Basic regular expressions every admin should know 209 Using URL Rewrite to redirect website domains and improve SEO 213 Redirecting customers to a secured website 215 12.5 Ideas to own 218 Building a web farm with Microsoft Network Load Balancing 219 13.1 Introduction to the load balancing web farm 220 Using Microsoft Network Load Balancing 221 Benefits and issues with Microsoft NLB 221 When to use Microsoft NLB 222 13.2 Deploying a web farm using Microsoft NLB 223 Creating the remote connections 223 Installing the NLB feature 224 Creating and configuring the bad balance with Microsoft NLB 225 13.3 Deploying websites to a web farm using PowerShell 226 Deploying website files to remote servers 226 Creating a website for IIS 227 13.4 Health and verification for NLB 227 13.5 Lab 229 Checking the health of the load balance 227 Verifying operation of the load balance 228 the 13.6 Ideas to own 230 Building a web farm with Application Request Routing 231 14.1 Installing ARR 232 Requirementsfor Application Request Routing 233 Installing Application Request Routing 233 14.2 Creating a web farm with ARR 234 Creating a load balance with ARR 234 14.3 Configuring Application Request Routing 238 Examining the URL Rewrite rule 238 Changing the load balancing algorithm 239

XV 14.4 Logging and health monitoring with ARR 241 Checking the health of the load balance 241 Health monitor statistics 242 14.5 Lab 243 14.6 Ideas to try on own your 244 High availabilityfor ARR using Microsoft NLB 245 15.1 Adding affordable high availability 246 Requirementsfor a highly available ARR 246 Installation of NLB for ARR 247 Monitoring NLB: a quick review 248 15.2 Lab (optional) 249 15.3 Ideas to own 249 Sharing content and configuration to the web farm 250 16.1 Sharing content for a web farm using PowerShell 251 Manually deploying local-stored content using PowerShell 251 Automating with PowerShell scripts 252 16.2 Sharing content using Distributed File System (DFS) 254 Installing DFS 254 Creating a replication group 255 Adding web servers to the replication group 256 Selecting the replication topology and schedule 257 Selecting the folders to replicate 259 16.3 Sharing content from a single Creating 16.4 Lab 264 a network share 261 16.5 Ideas to own 265 location 261 Sharing US configurationsfor a web farm 266 17.1 Configuring Shared Configurations 267 Configuring Shared a Configurations using clustered network share 268 Exporting the configurations from the first (master) webserver 269 Enabling Shared Configurations 271 Configuring IIS for Shared Configurations usingdfs 2 73 17.2 Installing components with Shared Configurations 273 17.3 Lab 275 Installing new software using all-at-once 273 Installing new software using a staggered approach 2 74 17.4 Ideas to own 277

Using the central certificate store for certificate management 278 18.1 Installing and configuring the central certificate store 279 Storing and naming certificates 280 Installing CCS on a local web server 280 Creating the website bindings for SSL and CCS 282 18.2 Using CCS on remote web servers 283 18.3 Lab 286 Installing CCS on remote servers 284 Enabling CCS on remote servers 284 Web bindingsfor CCS on remote servers 285 Using CCS with Shared Configurations 286 18.4 Ideas to own 287 Web farm provisioning 19.1 Implementing with the Web Farm Framework 288 the Web Farm Framework with ARR 289 Configuring the environment 290 Installing and configuring the control server 291 Preparing the primary and secondary servers 294 19.2 Building 19.3 Managing 19.4 Lab 303 the web farm 294 Creating the web farm on the control server 294 Adding the primary and secondary servers 297 the web farm 299 Using the tools under the actions pane 300 Changing the provisioning settings 302 Monitoring the webfarm 302 19.5 Ideas to own 303 Disaster recoveryfor US 304 20.1 Analyzing your environment for disaster recovery 305 The critical operational path 305 Determining points offailure in IIS 306 20.2 Back up the critical components and data 307 20.3 Lab 312 Determiningyour critical components to back up 307 How to back up and restore IIS 308 What you may have missed 308 Planning disaster recoveryfor xoeb farms failure 310 Don't forget 20.4 Ideas to own 312 to monitor 310 310 Recoveringfrom a

xvii The final exam 313 21.1 The lab setup 314 21.2 Your lab challenge 314 Never the end 317 22.1 Resources for the inadvertent IIS administrator 317 22.2 DevOps: the ever-changingjob of the IIS administrator 319 IIS PowerShell cheat sheet 321 Getting a list of IIS components 321 Installing IIS 321 ' Testing a default installation 321 Importing and viewing cmdlets for IIS 321 a Vieiving website 321 Navigating to application pools 322 Getting information about application pools 322 Creating application pools 322 Changing a xuebsite to a new application pool 322 Getting a list of worker processes 322 Restarting an application pool 322 Setting application pool settings (managed runtime) 322 Setting application pool recycling settings (recycle time) 322 Setting application pool recycling settings (schedule) 322 Viewing events for application pools 322 Getting the application pool identity 322 ' Setting an application pool identity (example for NetworkService) 322 ' Creating Settingyour own custom application pool user account as the identity 322 websites 323 Setting static compression for a server 323 Getting and setting static compression for a site 323 Adding dynamic compression 323 Changing directory browsing 323 Getting and setting the Default Documents 323 Adding IIS 6 compatability mode 323 - AddingASP and ASP.Net 323 ' Adding CGI 323 Listing all log files for every website 323 Listing all HTTP requests that occurred at 9:00 p. m. 324 ' Listing all requestsfrom clients to a particular URL 324 Listing all requests to/from a particular IP address 324 Adding Failed Request Tracing 324 Getting a list of authentication mechanisms 324

Getting anonymous authentication settings 324 Disabling/enabling anonymous authentication for the entire web server 324 Enabling/disabling anonymous authentication for a luebsite or application 324 Adding Windows authentication 324 Getting information about Windows authentication settings 324 Enabling/disabling Windows authentication 324 Enabling/disabling Windows authentication per site or application 324 Adding basic authentication 324 Getting configuration information about basic authentication 325 Enabling/disabling basic authentication 325 Enabling/disabling basic authentication per site or application 325 Installing certificates 325 Adding an SSL binding 325 Binding a certificate to a website 325 Installing Remote Management to multiple computers using PowerShell Remoting 325 Installing a new certificate for Remote Management 325 Installing Microsoft NLB to multiple servers 326 Adding DNS records for websites 326 Deploying simple websites to a web farm 326 Making new sites on a web farm 326 Installing the central certificate store 326 Lab setup guide 327 24.1 Using Windows 7 or Windows 8 as a standalone client 327 24.2 Choosing a virtualization platform 328 Hyper-V on Windows 8 328 Hyper-V - on Server 2008 R2 or Server 2012 328 Other options 328 24.3 Single-server environment 329 24.4 Two-server environment 329 Building the domain controller 329 Installing Active Directory Certificate Services (optional) 330 ' The remaining Web 1 server 330 24.5 The extended environment 330 Extended environment: basic 331 Extended environment: advanced 331 24.6 Final notes 331 index 333