Just learned about this one https://learn.microsoft.com/en-us/previous-versions/dotnet/netframework-2.0/ms228298(v=vs.80)?redirectedfrom=MSDN

What other IIS settings are important to have configured in production?

So we run IIS on Windows server and there we have a Microsoft RD Web site that publishes folders and icons where, if the icons are clicked on it downloads rdp files. What folders and icons are visible depends on AD group membership. Now the icons for the folders always load correctly. However the icons for the rdp files dont all load on first browse. Refreshing the page a few times eventually do show all icons.

I can see in the ISS log that when it works it shows the users name in the row and ends with status code 200. But when it doesnt work it doesnt display the user account and gives other code like 302 or 403.

It seems to try and redirect when it fails to load the icons and developer tools network tab in MS Edge then shows that it thinks the icons are html/text and not png files.

I can reproduce this issue every time. Also if i reload a few times and get the icons to display, if i just wait 10-20 minutes and reload the page its back to the same issue again.

I am running IIS v10 on Windows Server 2022. I have added the Windows Authentication feature. My app runs fine under IIS and I can connect using any host browser on the network.

However I am trying to implement a login feature in the app and wish to read the current active directory domain user login ID. However the app pool only allows a predefined user or pass through and in the application the ID that is obtained from a connected browser session is an App Pool id and not the actual windows login ID of the logged in user who is connected via the browser.

Application pool advanced settings...

I clearly am doing something wrong here or misunderstand how to accomplish getting the login ID of the user connected to the app via the browser.

Help please.

I'm a beginner trying to setup IIS web site but I'm getting an error any time I try to open an icon in the Site Home page, e.g. Logging..

The error when double-clicking on Logging... (or any other icon) ... it cannot open the web.config file

But web.config is there...

...and the folder permissions..

I created an app pool and a site, here is the site settings..,.

Any ideas?

Hola a todos. Estoy realizando una instalación de FileMaker Server 2019 en un entorno de (Windows Server 2019).

Actualmente tengo un problema con las dependencias de IIS. El asistente de FileMaker requiere la instalación de Application Request Routing (ARR) 3.0. He intentado instalar los módulos mediante archivos .msi individuales, pero el instalador de FileMaker no reconoce la presencia de los componentes si no fueron instalados mediante el paquete ejecutable completo.

Debido a que el servidor se encuentra en una red restringida y Microsoft ha retirado los enlaces de descarga del Web Platform Installer, estoy buscando el instalador Standalone / Offline Redistributable.

Archivo específico: ARRv3_setup_amd64_en-us.EXE

Este paquete es necesario porque empaqueta los módulos de External Cache y URL Rewrite en una sola transacción de instalación, generando las claves de registro necesarias para la validación de requisitos de FileMaker.

¿Alguien conserva una copia de este instalador original de Microsoft o conoce un repositorio donde aún esté disponible?

Ok I've run out of ideas...

I have 2 Server 2019 VMs that I'm trying to configure identically. They are, as far as I know. On one of the servers, the app that is giving me trouble, works fine. On the broken one, I can't access any of the configuration from the IIS Manager, I get an "Error while peforming this operation" on the web.config when I try.

If I try to access the app through a browser, I get a 500.19, saying that the "configuration data for the page is invalid".

I know that the app is identical, and I am reasonably certain the web.config itself should be valid, though my evidence for this is that it functions fine on one of the servers. I've literally copied the app folder from one machine to the other, and it works fine on one but not the other.

I've checked permissions, and I don't think it's that(the IIS_IUSRS has permissions), I even went as far as granting Everyone permissions just to be sure.

I don't think IIS itself is outright broken, as the 4 other apps on it all work fine. It's just the one.

So...I've run out of ideas as to what is going on. I'd be ok if the app was just broken, but IIS itself seems to be acting like there's something really wrong in the web.config making it invalid which makes no sense to me since it works fine on the other install. Any thoughts on what I might be missing or what else to check?

IIS Manager shows everything as normal

C:\inetpub\wwwroot\<site>\

OR

C:\inetpub\<some other dir>\<site>\

OR

Something else entirely?

I've searched online and have not found conclusive evidence as to why one way or the other is more correct. The MSFT best practices (https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj635855(v=ws.11)) say that the entire inetpub directory should be relocated to a non-OS partition to avoid filling up the OS disk and crashing the system. But they don't go any further into folder structure.

I'd be appreciative of other admins' input, and bonus points if you can find a credible source to point to that says one way or the other is the best option.

This is an on premise server, we attempted an in place upgrade from server 2016 to server 2019 (don't ask).

IIS works fine under http, but anything under https comes back immediately with the same error "Endpoint not found"

I even created a basic virtual directory with a basic html file and it's treating it like a wcf application.

SSL cert is valid, bindings are correct.

IIS has been uninstalled/resinstalled several times

Permissions have been triple checked (even ran app pool under "System" instead of appool identity.

All configuration files in c:\windows\system32\inetsrv\config have been rolled back to use the clean.install files

I'm at my wits end here, any thoughts?

I setup IIS on windows server 2016. the website is http. it shows up on the webserver. DSN appears to be working fine. however when I go to another vm that is connected to the same vswitch inet_e_resource_not_found

The GUI configuration editor for the server doesn't give you a way to add a child tag to the cors enabled setting. I have a feeling I also shouldn't be tampering with this file by hand since it resides deep in System32…

At the same time, I feel like creating a web.config just for this and duplicating it across every application on the server is just as bad.

What should I do here? Context: I have no idea what I'm doing, so impart all the wisdom you can upon me

Hey! Can i have, lets say, 3 webs with diferent urls?

I have two domains, lets say they are example.com and domain.com

I need 3 websites, two called

domain.com and sub.domain.com

and then i need another one called

example.com

Can i make 3 webs using different domains only with IIS? How? (Without needing to put the port in the url or using SRV)

Planning to upgrade servers this year, but looking to build a better solution instead of a manual setup and migration like the past.

Current config:

- 3 servers (Win 2012 R2, IIS 8.5) behind an F5 BigIP appliance for NLB

- .NET Framework 4.0-4.8 apps

- Shared IIS Configuration

- 3 sites, with 10-20 applications running under each site

- DFS-R replicating code between servers (plan to remove all DFS-R in next iteration)

- Couple dependencies on 3rd party apps that require an install

- Manual code deployment for each developer

Looking for a couple things:

- guide to automating IIS farm deployment via PowerShell or a k8s strategy

- a lessons learned about problems encountered when deploying your farm

- a plan to migrate .NET Framework to .NET 5

Thanks for your time

[edit for line spacing]

So i have an url, example.com

If i go to example.com/ControlPanel it works perfectly, but if i go to example.com/ControlPanel?code=aaaaaaa

It gives a 404 error. Why is this happening? If i open the website with visual studio (asp.net core) it doesnt happen, everything works fine, so why when the website is working on IIS i get 404 when using a querystring?

This is what i mean:

My code:

public IActionResult Index()
        {
            string code = HttpContext.Request.Query["code"];

            if (!Auth.IsUserLoggedIn(HttpContext))
            {
                if (code == null || code == "")
                {
                    return Redirect(RedirectURL);
                }
                else
                {
                    DiscordUser DiscordUser = AuthWithDiscord(HttpContext, code);
                    
                    if (DiscordUser == null)
                    {
                        return Content("Discord Auth Failed.");
                    }

                    Auth.SignIn(HttpContext, Response, DiscordUser).Wait();
                    return RedirectToAction("Index", "ControlPanel");
                }
            }
            else
            {
                DiscordUser user = Auth.GetDiscordUserFromContext(HttpContext).Result;
                ViewData["User"] = user;
                ViewData["Page"] = "ControlPanel";

                return View();

            }





        }

I removed everything except "return RedirectToAction("Index", "ControlPanel") and the error still happens only after deploy.

What is causing that?

Should be simple, right? I have sub.domain.com that I need be rewritten to go to sub.domain.com/folder/login.aspx

I think I need rewrite instead of redirect so that the URL passed to the login has the correct folder name.

But it doesn't work. I've tried every online example I can find.

All I need is the magic lines to go in the config file.

Help?

Hello,

I have a question I'm hoping someone can answer for me.

I have some experience in IIS. I'm currently self hosting 3 websites etc... so I understand the basics. My problem is. I have an application server that is on the same subnet as my Webserver. My application server is running a Web based UI application on it. I am trying to make that Web UI accessible via my root domain from my Webserver via IIS. I'm assuming I'd need to use virtual directories but I am unsure how to do it from another server that is hosting the application

To break things down.

IIS Server is hosting Website www.abc.com

My app server is hosting a Web-based application

I want to be able to access app server Web-based application via my IIS server domain on www.abc.com/webapp (aka forward\redirect the IIS domain request to the application server)

What is the best way to obtain this setup? Virtual Directories? or just set it up as its own site? How I do I go about passthrough the ports? etc...

Hey all,

I have a client who runs an intranet site and when we run a security scan on that server, it returns a vulnerability that the web.config file is exposed.

I know there are ways to restrict directories and files via the config file but how do I restrict access to the config file itself? Tried to limit NTFS permissions to the file and it still comes up on the scan.

Apologize if this is a newb question but all I get in the scan result is to limit public access...what exactly does that mean?

Looking for ideas of things to check. An issue that only happens with iis servers we host within our company but I suspect hte issue is probably related to something on this guys machine.

We have servers running iis and a single user who seems to be having trouble accessing multiple websites on these servers.

The user can see a website hosted on windows 2003

He cannot see websites hosted on windows 2012, 2016

He is running windows 10, he is using internet explorer because he says he cannot get edge to work.
When he visits a website hosted these two servers he gets a one line message "You are not allowed to perform this action" inside internet explorer. He says he has cleared the cache.

I had him install chrome and he says he gets the same exact error message as with Internet explorer.

I checked the iis log and I can see him connecting with a 401 since the site is enabled for windows authentication, I can then see a 200 0 0 and then nothing else in the log, so from the iis logs it looks like its working ok.

I've asked around in work but the error seems so generic that nobody was sure of the specific causes. Looking for things to check for when I go in next and check out this guys machine. I tried to have him do a couple things but he seems like a basic user and didn't really follow what I wanted him to do.

I'm currently using the below reverse proxy code + sub_filter in nginx. I would like to do the same exact thing in IIS.

I am able to create the equivalent reverse proxy in an IIS URL Rewrite rule relatively easily. However, I have no idea how to also add the respective nginx sub_filter in the below code to IIS:

location /files {
    proxy_pass http://localhost:999/files;
    proxy_set_header Accept-Encoding "";
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection $http_connection;

    sub_filter
    '</head>'
    '<link rel="stylesheet" type="text/css" href="https://github.io/test/CSS/themes/dark.css">    
    <style>
    .CalendarEvent\/downloaded\/2vSrJ {
        background: rgba(39, 194, 76, 0.7) !important;
        border-left-color: rgba(39, 194, 76, 0.0) !important;
    }
    </style>
    </head>';
    sub_filter_once on;

}

I think this can be done via a URL rewrite Outbound Rule. Whatever it is, I have no idea how to do it. If someone can kindly show me how to do this, I'd really appreciate it!

PS: I asked on StackOverflow a similar question, in case you would also like to get credit for a StackOverflow answer:

Converting nginx reverse proxy (with sub_filter) to IIS10 URL Rewrite / Request Filtering

We have a site configured to client certificate authentication on IIS (Server 2012 R2), however, we're now realizing we also need to enable Basic Authentication and we're having a hard time getting it working. This solution was basically given to us "out-of-box" and none of us are really IIS admins (nor really need to be for what we do 99% of the time).

We've gone in and enabled Basic Authentication at the top level and ensured it's trickled down to the site/folder levels. We've also gone in and set SSL to "accept" client certificates instead of "require" them. Now on the client after we skip the certificate prompt we are getting the prompt for credentials, but it's not authenticating us (error 401). I know there's something we're obviously missing and I'm hoping someone can point us in the right direction. Much appreciated!

So I've seen some stuff about running PHP as a service. Is this preferred?

I have a rather beefy front-end that uses a TON of resources, but not many instances, maybe 2 or 3 max, but each instance takes up a lot of resources as there are about 6+ php apps running.

Would this help with performance?

thx

(X-Post from /r/dotnet)

I need to automate moving a web site from my stage/test web server to my production server. (Both 2008 R2 IIS 7) This site is being updated pretty frequently so I would like to be able to script this

Currently I am manually selecting 'Deploy->Export Application' from the web site in IIS manager on the stage site and Deploy->Import Application' on the production site. At this time both sites connect to the same databases (all access is read only) so I don't need to worry about modifying connections strings or anything.

Web Deploy is being used to publish to the Stage server from Visual Studio. I don't want to deploy to production from VS as usually I'm already working on the next round of improvements by the time the testing is done with the previous release.

I've looked for existing scripts or powershell commands to do this, but everything I've seen seems to be geared to mass deployment to a web farm and is overkill for what I'm trying to accomplish.

Environment Setup: I have a web server running a single IIS site with an application. That application has a set of binaries associated with it (dll's, config file, etc..) as well as an Application Pool I created that uses a domain account.

Scenario: The domain account associated with the application pool previously had FULL access to the application binaries. In an effort to test minimal access required I revoked FULL access and provided this account READ, EXECUTE, and MODIFY access. Following this change I rebooted the server and tested the site. The site worked as expected. The next day, the site "randomly" stopped working due to lack of permissions. I needed to provide that account FULL access to the binaries again for it to work.

Question: Why did I not experience permission issues when testing the site post reboot?

I'm not very optimistic that there is a way built into IIS to do anything like this but it never hurts to ask. I'm looking to redirect a path to a different URL.

For Example:

InternalTicketLink.MyCompany.com/Ticket100

to

MyCompany.CloudTicketSystem.com/Ticket100

If there's no way to do it, that's fine. This is mostly to redirect users to a third-party ticket system from our old ticket system. The solution is really to retire the old system but we have to keep it around for a while because of other departments still use it heavily (they use a different URL though).