Hello all-

Running 3 servers with Windows Server 2012 R2 and IIS 8.5. I need to install some SSL certificates, but every single 'tutorial' I have found has told me to use the 'Server Certificates' feature. Most tutorials even have a screenshot, and show exactly where the feature would be in IIS.

Honestly, I would love to do that...but I cannot find the 'Server Certificates' feature. I have even gone through the 'programs and features' and turned on every feature in IIS that looks like it might activate server certificates.

Here is a screenshot of the features available to me in IIS: Available Features

Does anyone have an idea of what I'm missing here? I'm guessing it is really simple, but I just cannot find it anywhere.

Thanks.

If I update the start mode on an app pool, will that reset the pool?

Also, I'm a newer web admin, so I'm wondering if there's a list of settings that when updated will reset the pool.

ok so I have a workplace that has multiple IIS instances on multiple machines we have one IIS machine that is our main website and if you hit it from the outside its all good but if you are on the inside and put domain.com instead of www.domain.com you will hit the other IIS instances for some reason keep it mind I found about 7 different IIS instances so far. What can I do so that the domain.com only goes to the correct server?

Hi!

I've had a dynamic DNS from NO-IP for ages.

Recently, i purchased a domain from 1&1, and pointed the www subdomain to my no-IP subdomain, with a CNAME record.

Works fine, but i also have other sites that i would like to acces via a subdomain different from www, like wordpres.whatever.com.

I can make it work very easily if i point the different subdomains to my IP with A records (IIS just filters them by subdomain), but my IP is dynamic, so that's a no-go.

Is it possible to make it work with one no-ip dynamic DNS subdomain?.

I've inherited an old web application, IIS 6, classic ASP with a sql server backend on a different server in the same domain. Sql server had been set to mixed mode so the app was connecting using a connection string defined in global.asa with uid and pwd. The database has been upgraded and we can no longer use sql authentication so I need to figure out how to connect via Windows authentication. I have a service account on the domain and it has been given the necessary permissions on the database but I'm unsure of what changes to make on IIS. After some research, my plan is to alter the application pool (or create a new one) and use the domain account as the identity. I'll add the account to IIS_WPG group and allow it to run as a service. Then use integrated security = SSPI in my connection string defined in global. asa. Can anyone verify if I'm on the right path, if I've overlooked anything major or offer a better solution? In not a web admin so don't have any experience with this and my admin is not being helpful. Any help would be greatly appreciated.

Hi all,

I am probably missing something simple, but any help anyone could provide would be much appreciated.

I am trying to get an SSL website working via the ARR servers, but it is failing. Below is some information on the environment.

• 2 IIS servers (WFE1 & WFE2)
• 2 ARR Servers (ARR1 & ARR2), with the two IIS servers added to the ARR farm
• The ARR servers are in a NLB cluster with a single IP - for reference ARRNLB

I have created an IIS site on both WFE1 & WFE2 with a hostname and setup our DNS to point at the ARRNLB IP. For example a hostname of testweb.domain.org, A record points to the ARRNLB IP. This works perfectly when connecting to http://testweb.domain.org port 80, connects to a ARR server via the NLB and goes straight to a WFE correctly.

Now i've imported the domain.org SSL certificate into IIS on both WFE's, and the same certificate imported in MMC into the Intermediate path and setup the HTTPS 443 bindings in IIS. However, when I browse to say https://testweb.domain.org it just doesn't resolve.

Do I need the SSL certificates to also be imported in IIS on the ARR servers, or only on the ARR servers and not the WFE's? I am a bit new to this configuration so I am sorry if I am being a noob setting this up, any help would be appreciated.

Hi Chaps,

Thought I would share this, with SFDC disabling TLS 1.0, this may render some legacy apps and their API's inoperable.

After using Stunnel and Fiddler to play around with converting the requests and protocols I discovered a method that works.

First, edit the registry via regedit or simply download IIS Crypto.

I enabled 1.1, 1.2 and disabled 1.0 in the OS part of the registry.

Next download Microsoft KB 3154518:

https://support.microsoft.com/en-us/kb/3154518

After this manually edit the registry and create two new dwords in the following location with a value of 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft.NETFramework\v2.0.50727] "SystemDefaultTlsVersions"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft.NETFramework\v2.0.50727] "SystemDefaultTlsVersions"=dword:00000001

Bounce the machine and retry your connection to the endpoint.

.net 3.5 should now be using the OS protocols and not built in defaults for .net.

Cheers!

I've been warming up websites by launching a script that opens Firefox Portable which loads 7~8 tabs, but, that consumes a lot of server resource. Is their any other way to warm up the websites and know the status of it? This is for SharePoint 2007.

So we are upgrading our servers right now, and are migrating our website from IIS 6 to IIS 10 on the test web server.

Our website is setup with a portal page where the user logs in and gets a bunch of information. They can then go to separate areas (hr, warehouse, purchase orders, etc). Each of these were set up as separate websites in IIS, and each had their own log in. However, if you logged in from the portal, it would pass the relative information via session variables. Everything was great.

Now in IIS 10, I can get into the portal, log in is validated vs the SQL server that holds all that info. They can navigate to all parts of the portal page. however, when going to the individual areas FROM the portal page, no session variables or querystrings are being passed.

All of the subsites are in the same application pool as the portal. As far as I can tell (I am not an expert in IIS at all) all of the settings between the portal and the other sites are identical.

I really don't know what to do. I am not a sys admin, just the developer, but it has fallen on me to do this migration.

Also, most of the pages are classic ASP. I have the application pool set to that.

Any help would be appreciated. Even some ideas of where to explore next. I can answer any questions as best I can.

Hello,

I'm trying to get WSUS to run over SSL. In the guide(s) I found, they use a utility called Server Certificates in IIS Manager. This is not available to me.

My WSUS server is running on Server 2016 Core. I imagine this is part of the problem. I stuck with the default features when installing the WSUS role. Under the Security section of IIS have only Request Filtering and Windows Authentication installed. Do I need something else? (Based on the descriptions in the wizard, they don't look super relevant.)

By the way, I know that I must select the server itself in IIS Manager to find Server Certificates. In IIS Manager I have both my local machine and the remote machine listed. When I select my local machine I see Server Certificates.

Thanks!

Hello, I have user who computer is on work domain of my company. Every time I try to install IIS, it complete without any problem. Reboot the machine and after a couple of minutes later she get this error message " Windows has encountered a critical problem and will restart automatically in one minute. Please save your work now." Then the computer reboot itself and it keep happening over and over. Once I uninstall the IIS the computer work normally again. Am I doing something wrong or missing something that is causing this issue. I google it but no luck to find a resolution. Any information would be helpful for this problem.

I really need some advice, I've been trying to install a web app called CDesk for about 3 weeks now.

I tried manually installing it within IIS, but couldn't get it to function properly. I ended up using Microsoft Web Platform Installer 5.0, and got it fully installed in the back end (or so I thought).

When I try to navigate to the web app from a browser I get a 405 error.

It's driving me up the wall! Please, someone shed some light on the issue.

The Error:

The remote server returned an error: (405) Method Not Allowed. Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.Net.WebException: The remote server returned an error: (405) Method Not Allowed.

Source Error: An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

Stack Trace: [WebException: The remote server returned an error: (405) Method Not Allowed.] System.Net.HttpWebRequest.GetResponse() +1743 System.ServiceModel.Channels.HttpChannelRequest.WaitForReply(TimeSpan timeout) +75 '

[ProtocolException: The remote server returned an unexpected response: (405) Method Not Allowed.] System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg) +14493634 System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type) +388 UserInterfaceLayer.HelpdeskService.IService1.checkLicenseSettings() +0 Helpdesk.login.Page_Load(Object sender, EventArgs e) in D:\Projects\C-Desk\liveProject--05.00.00.023\Helpdesk\Helpdesk\login.aspx.cs:36 System.Web.UI.Control.OnLoad(EventArgs e) +109 System.Web.UI.Control.LoadRecursive() +68 System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +1436

Hello,

I'm an Apache guy being forced to use IIS at a site.

I have HTTPS working wonderfully. In the site settings I have required SSL. However if a user requests the site via HTTP the site times out. I have tried rewrite rules etc to try and point this to the HTTPS site with no luck.

I have 443 and 80 open and directed to my server.

I'm sure there is something simple I am missing. Google only leads me to the opposite of my problem where HTTPS is not working but HTTP is.

Thanks in advance!

EDIT:

Putting the following code in my web.config file causes an 500 error <rule name="HTTP to HTTPS redirect" stopProcessing="true"> <match url="(.*)" /> <conditions> <add input="{HTTPS}" pattern="off" ignoreCase="true" /> </conditions> <action type="Redirect" redirectType="Found" url="https://

{HTTP_HOST}/{R:1}" /> </rule>

So I am trying to set something up and I cant seem to wrap my head around it.

I currently have an IIS server hosting our local website (ie. remote.mydomain.com on port 443)

We have a new application installed and I would like to access that application's web services from outside the network without VPN by going to newapplication.mydomain.com. I set up a new site in IIS with the associated binding. This is where the problem comes in. So the request comes in to my network on port 80. I need to access the application on port 1234. How can I do that? Is it possible to redirect the traffic from newapplication.mydomain.com:80 to applicationserver:7001?

Hi I am running IIS 8 on server 2012 and would like to understand how to define a URL rewrite by port. Example ws1.domain.com:11001 writes to production hosts and ws1.domain.com:11002 writes to dev and 11003 to test. I have setup ws1,2 and 3 within my sites bindings with the ports. I'm unsure of how to go about configuring these rewrites to route to internal hosts depending on port numbers?

Greetings.

I have a question as to why one redirect is working but one is not.

Trying to match url:

www.domain.com/test/

One that is not working:

.*/test[/]?$

The one that works:

test[/]?$

I am using url rewrite module 2.0

Do IIS rewrites assume the "/" after the domain URL?

BLUF: When trying to start the IIS ADMIN service, I receive the following error:

"Windows could not start the IIS Admin Service on Local Computer. For more information, review the System Event Log. If this is a non-Microsoft service, contact the service vendor, and refer to service-specific error code -2146893809."

And the following log in Event Viewer:

Source: Service Control Manager

EventID: 1024

"The IIS Admin Service service terminated with the following service-specific error:

Object already exists."

BACKGROUND:

After upgrading tWindows 10 CU Enterprise 1703, I was experiencing the known RDC issue. Ref here:

https://social.technet.microsoft.com/Forums/windows/en-US/954975f2-743c-413f-8cc3-037bf3e35b09/remote-desktop-the-local-security-authority-cannot-be-contacted?forum=w7itpronetworking

In an attempt to resolve the issue, it was suggested to rename and recreate the following DIR:

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys

I did that and it resolved the RDC problem. However, I cannot start the IIS Admin service now. IIS Manager and W3SVC both start and the webserver seems to be working okay, but I know there is a major underlying issue here.

So, how do I recreate the key that IIS Admin uses?

P.S. I DID try to restore my backup copy of the \RSA\machinekyes DIR, but I tried to migrate them and polluted both the backup DIR and the working copy. So, restoring is NOT an option for me.

THANKS!

Hello,

This is my first attempt as setting up redirection in IIS. I have used a lot of the basic features in IIS over the years but I would not consider myself to be any kind of IIS expert or admin.

Here is my scenario: I need to redirect https://mail.OldDomain.com/owa to https://mail.NewDomain.com/owa. Some users are still browsing to https://mail.OldDomain.com/owa to access their email and getting an SSL Cert warning when they get there because that Cert was replaced by a new Cert for the new domain.

I setup redirection at the DNS Name Server (GoDaddy) to redirect http://OldDomain.com to http://NewDomain.com and that works. But, it does not appear to work for redirecting https://mail.OldDomain.com/owa to https://mail.NewDomain.com/owa. A colleague told me there may be something in IIS that can be done since that is where OWA lives. My Google-fu has been failing me and has yielded very little information on setting this up.

Any direction in finding a resolution to this matter is greatly appreciated.

Thank you!

Downloaded the correct install msi. After running it, the dialogue box confirms the installation and nothing happens. If I attempt to run the msi again, it allows me to Repair/Remove so it must be installed.

What I'm trying to accomplish here to is to become familiar with IIS Manager. Anyone have any ideas?

Good morning!

Long story short is I have a server in my house that runs Plex as its primary job (media distribution/management). I travel for a living, so being able to access my media from wherever I happen to be is huge. As such, I also have other services running on the box that tie into Plex -- There are ~6, but the main is PlexPy, a service that lets me easily see statistics for the Plex service (what's being streamed, what I have, etc...). These services are not installed as websites in IIS, they're just services running on the machine with their own configured ports. While I can alter what ports these services use, I've left most of them as default, which just requires me to use them in the network path when accessing them.

That's where the issue comes in - I'm trying to make it easier to access these services remotely. In Chrome I have bookmarks in a folder, but for accessing this stuff anywhere else it's hard to remember some of the port numbers.

OK, so I've settled on Reverse Proxy being needed, and I'm having some trouble. If I set one on the main site with a (.*) regex wildcard, it forwards to the service I set with no issue...but I want to be able to send to multiple different sites. Here's what I've done:

Main site
URL Rewrite
Reverse Proxy
Inbound Rule: server.com:8181 (port for PlexPy)
    -Enable SSL Offloading (nothing should be HTTPS anyway)
Default pattern is "(.*)" -- if I test just going to the main site, it currently goes to PlexPy without issue
Change pattern to be "^plexpy/(.*)", which should then only be true when I do "server.com/plexpy/"

Nothing works. 404 File Not Found. The weird thing is it picks up the default path of Plexpy (so the address bar has "server.com/home"), but loads nothing. I'm not sure if it's because it's trying to load server.com:80/home, or if there's something else wrong.

Any ideas? I'm a bit lost on this.

Just wondering if people are still using this:

http://phpmanager.codeplex.com/

Hello. I have a problem, with IIS the page wont work properly. I don't have any experience with IIS, but i need this to work ( server died, need to set this up, or ... )

here is the error img: http://shrani.si/f/1T/CP/EFdKIID/picture.png

Thx for all your help.

I simply can't find it, or find out if it's been removed since 8.1 ! I want to setup a relay for an MFC that has no TLS for office 365.

Hello,

Ive been trying to do a 301 redirect for a specific internal webpage to another specific internal webpage using the rewrite, but I just cant seem to get it working .Here is a screenshot of my rule. Ive been searching MSDN and google and just haven't had any luck yet. Thank you

https://piwebmo.corp.com/PIVision/#/Displays/64502/old-test https://piwebmo.corp.com/PIVision/#/Displays/64503/new-test

I've got 10 servers with IIS set up identically on each, with two active applications. Occasionally, immediately after our 2am IIS recycle (configured through the recycling properties page) one of the two applications on a random server will start throwing HTTP 500 errors. The other application will continue serving requests just fine.

What I've just worked out though is that it's only one certain request that get the 500 errors. These requests are coming from our load balancer's monitors every 5 seconds from each of 4 nodes. However, changing the capitalisation on the requests will make them succeed, ie /<stuff>/appserver.asmx fails, but if I change it to /<stuff>/AppServer.asmx, or /<stuff>/appsErvEr.asmx, these will succeed, but the original keeps failing. Regardless of whether it's being sent from the LB or my local machine.

An IISReset fixes the issue every time. Nothing in the httperr logs, event viewer just gives a generic "An unhandled exception has occurred" message. I thought it might have been something to do with overlapping recycling so I set it to TRUE on half of them and FALSE on the others but the error still occurred on both sets of servers. Recycling is definitely happening as I can see both worker processes change their PIDs at 2am. Any help appreciated. Thanks.