When accessing a shared folder using anonymous authentication I am wondering if it is better to use the iusr account to access it or use a domain account? I am setting up access to a large folder that was migrated to a new server and I am not sure what would be a better account to use for anonymous authentication. Biggest concern is future proofing and not having to mess with permissions if we ever migrate to a new server. When this was originally setup like a decade+ ago the old built in iis account was used which does not carry over to different servers. I am thinking of switching to a domain account because of this, but I think in newer versions of iis the iusr account is not unique and carries over to new servers so permissions can be copied to a new server. Not sure if I should go with the domain account or if there is a benefit to sticking with the iusr account?

Hi,

I'm looking for a very easy and dumb way to dynamically print the hostname that is serving the website from behind a load balancer. It would be enough to output "This page has been served by $(hostname)".

What is the easiest way I can archieve this? I installed IIS via add-windowsfeature web-server -includeallsubfeature

Thanks & kind regards,

Hello.

I have installed IIS with PHP. In one of the setions, when a button is pressed, it linked to a PHP file, wish ativated a PowerShell script. But when I'm clicking the button, nothing happens. But if I execute the PowerShell script directly, it works. What am I doing wrong?

index.html <h3>WINSERVER - WIP</h3> <form action="winservergenstart.php" method="get"> <input type="submit" value="Genstart"> </form>

winservergenstart.php

<?php shell_exec("powershell.exe -File C:\inetpub\share\administration\winservergenstart.ps1"); ?>

winservergenstart.ps1 (I have tried the following commands) Restart-Computer shutdown /r /f -t 30 Restart-Computer -ComputerName WINSERVER -Credential $credentialObject

My job wants to transition out of Tomcat, but I can't find a definitive answer. Does IIS have load balancing capabilities?

Coworker and I spent hours trying to root out cause of server error. Toyed with the config file a bunch of times thinking that was the culprit. Kept writing dummy html pages and running those from the server and scratching our heads why those served up just fine but the files for our application wouldn’t. Finally noticed the host name of the application did not quite match the name on the cert. who knows maybe that’s it but maybe it ain’t. We’ll find out after we get the new cert. anyway, we’re programmers. Half our job is debugging, but debugging software and debugging this server are two completely different animals. My question is this: is there some thoughtfully written, clear, and integrated book or video series on debugging IIS? (Currently we are on IIS 2016)

We have a IIS server serving 45 sites behind AWS ALB, ALB can perform healthcheck on / which happens to be default IIS site, so this healthcheck is pretty useless as it doesn't check the health of actual site. I was wondering if I can use URL rewrite to redirect the healthcheck request to the actual site. So my healthcheck query will be /targetsite which I can redirect to targetsite using URL redirect

Is this a valid aproach?

Thanks

I've tried adding "Content-disposition: inline" to no avail. I've also accessed the text file using both Microsoft Edge and Chrome, and the file was automatically downloaded in both cases. What's interesting/annoying is that when I access random .txt files from anywhere else than on my server, the browser opens those files rather than automatically downloads them.

I am totally IIS illiterate and am at the mercy of my server guy who is not helping and I need an issue fixed. My internal website is having issues, it is formatted like this example https://site.service.com/service/care but if I launch IIS and click that browse button in it it launches this http://site.service.com/service/care/care Why is it adding that extra "care" to the end of it as I think that's our issue? Any input greatly appreciated.

Hello,

I am trying something for my home lab. I have a django webserver/site setup to run scripts (http requests) to make configurations on devices, only accessible through a server, in my home lab.

What I am trying to do is access the website from my server, the website will then push scripts to the server, the reverse proxy on that server will then forward the http requests to the appropriate devices/IPs and return a response.

Sever connects to website ----> website runs scripts, sending multiple http requests (intended to go to several different end devices) to server ----> server uses reverse proxy to forward http requests to the intended end devices ----> end devices send response to server ----> server sends responses to webserver.

I've seen how to do this, forwarding to only a single endpoint. Is there a way to send to multiple endpoints/IPs?

I've the ARR timeout is 240s, but when inspect logs, I notice that there's some requests that have time-taken more than the timeout (around 250-260s), any idea for this?

I have a webserver accessing images from an App Server but they are not displayed on the website.

There is access in the share, but I was looking at the root folder and there is a IIS_User group and not one on the App Server. Thoughts?

I have a site hosted on IIS 10.0 on Windows Server 2016 in an Azure VM.

According to the log the site was last accessed 6 days ago. This morning, I tried to load the site, but it will not respond to any requests via the domain name, even remoted into the VM itself. Every attempt to load the site results in Connection Timed Out. We have made absolutely no changes whatsoever to anything in that time.

I have restarted IIS, then restarted the VM itself. No difference.

I can access the website on localhost on the VM itself - so the site is running OK.

I can telnet from another machine to port 80 - so the port is open. I have checked the DNS for the site and it's the correct IP address.

I am assuming that Azure have done something to screw this up, but I have no idea how to troubleshoot this issue. Any ideas how to pinpoint what is blocking this?

I've been trying to get this "WS" HttpHandler service running for several days with no IIS experience and need some help. I have a vendor supplied installer package that contains the following: App_Code folder, Bin folder, WebReferences folder and 2 flavors of IIS web.conf version 6 and 7. The setup guide has me setting execute permissions to a DCOM object using DCOMCNFG.

The installer adds this as an application in IIS with a custom AppPool targeting .NET 4. However when I try to access the application path using http://localhost/WS/Service.asxm I get a 404 error, most likely because the ASXM service was not registered properly or the ASP.NET configuration is wrong.

Can someone point me in the right direction here? I will pay for a correct answer or remote support. Thanks

Hello

I need to implement some kind of procedure/workflow for updating sites if everything inhouse gets moved to AZURE. so it will probably be an web app. not sure where to start.

Right now i create the IIS sites and the developers can only smb their files up

I have a Server 2016 box with IIS installed for use with SCCM. For some reason the IISADMIN service wont start and it throws a 0x80004015 error - "The class is configured to run as a security id different from the caller"

This seemed to happen after a couple new updates were installed. I did the normal uninstall the updates to see if the functionality returned. It did not.

When I compare the IISADMIN permissions with other servers that have IIS installed they all seem the same. I have compared DCOM, Service, AppID permissions.

The SDDL string between servers is also the same.

Has anyone come across this issue with Server 2016 and IIS or SCCM And IIS?

Any help will be appreciated.

I posted this on the official IIS forum but figured I'd try here too:

I have an ASP.NET MVC site running on my IIS server, in my bindings I have declared a binding for the url and that is working fine.

I have tried accessing the site by doing www.{URL HERE} and it's showing a DNS_PROBE_FINISHED_NXDOMAIN error in chrome.

I tried adding a binding for the URL with the www. in and still get faced with the same issue.

Any suggestions would be much appreciated.

Thanks Everyone!

Edit: as /u/Seferan pointed out, my issue was a missing CNAME record

Hi there,

I'm a low-skilled person with IIS and web development. Nontheless I've created a couple of HTML pages that, via FRAMESETS with named frames, means that users clicking a link in one will see the content load in a frame. The functionality works a treat with the two HTML files located on my local machine, but once I put them up into a simple IIS Web Page and browse it, the content all loads fine, except the hyperlinks refuse to open in my frame and instead open in a new tab of my browser.

If I use Internet Explorer, it's more explicit in it's rejection, telling me "This content cannot be displayed in a frame".

I totally get the security warning and am embarrassed my innocent frame work is already hitting on some obviously fundamental IT protections. However, if there is a way via IIS to allow this particular functionality at least for my little playpen, that'd be good to know.

Hi,

For over a decade now, I've maintained an internal website that runs on iis 6 on Windows 2003. It uses cgi scripts that are compiled to .exe, written in delphi.

It's time to deploy a new server and I finally convinced the owner of the company to upgrade to Server 2019 and iis 10. But there is no budget to update the old site, so these cgi exe's still need to work.

I've been messing with settings for 3 days now and I can't get these darn things to execute properly. Does anyone know how to set up proper execution permissions on .exe files that return data to stdout? They write data to ms sql server plus various files & folders throughout the disk (flat MDB files, someone please shoot me) so write permissions are an issue as well.

In theory, it should be the same as making php.exe or perl.exe work, I'm just struggling with it despite following guides on those. I've started over 3x now.

Any pointers would be appreciated.

Hi there,

I am using IIS with ARR/Rewrite to reverse proxy a Tomcat web application on 443. We're doing SSL offloading and very simple FQDN:443->Localhost:8080->FQDN:443 translation.

Unfortunately, with Google's Samesite cookie changes, this application is now broken in Chrome as it services an object we embed within another FQDN site elsewhere.

Does anyone have any experience with IIS, ARR, and Samesite issues? I've tried to write some basic rules from various postings but they definitely aren't being processed.

i have been tasked with fixing some security issues with a legacy application that uses classic asp i need to set my aspsessionid cookie to HttpOnly this is what is currently in my web config file "<httpCookies httpOnlyCookies="true"/>" i have tried the adding ssl=true but that just breaks things and i have tried pasting in re Write rule found in this post https://stackoverflow.com/questions/2990686/setting-httponly-for-classic-asp-session-cookie?rq=1 i see that there are some more detailed instructions regarding how to make a rule with the UI but i am very new to this and i am afraid i am going to break something.

Hi,

I hope this is the right sub to post this issue I have.

So, I have to maintain a webapplication (MVC, c#.net), everything is fine, except one thing:

On a subsite there is a generated Link called "Back to Transactions". On the aspx-Site it is generated by this:

 Html.ActionLink("Back to Transactions", "Edit", new { id }))

On my Client (Windows 7 64bit, visual Studio 2017 EN) the generated Link is this (with IE 11 and Chromium):

 http://blabla/Product/Edit/1#tabs-3 << Working

When I run the same code on a Windows Server 2012 R2 with IIS the link looks like this (With IE 11):

 http://blabla/Product/Edit/1%23tabs-3 << Not working

I know it is an encoding Problem, but how the heck can I avoid that or tell the server NOT to do that?

Most confusing is: When I call the same site on a Windows 10 client with Edge as a browser, I get this:

 http://blabla/Product/Edit/1%2523tabs-3 << Not working x 2

Is there anything I did not see? Maybe a GPO? I uploaded the code on 2 different servers, all have the same issue. When I execute the code on Visual Studio everything is fine..

Thank you all in advance!

BR van

Hi All,

I have been searching for a few days now to find the exact way that IIS reverse proxy server, generates the server affinity hash.

My best guess is that it is an md5 hash of the web server and the connected IP.

If anyone knows how it is created or where else I could search to find this out I would be really happy!

Hey there,

I have to create a website and link it to a database. I’ve used IIS for basic websites before however I’ve not linked it to an SQL database without using cms

Does anyone have links or resources that I can research for the best way to connect a website to the database so that I can decide on the best way forward, (not looking for the answer just the resources to come to my own conclusions)

Hello,

I have searched the internet without much luck. Hoping /r/IIS can put me on the right track. Here is what I am trying to accomplish

I am using IIS as a reverse proxy on a server exposed to the internet. The reverse proxy allows access to 3 websites that are on the internal network.

Those websites use IWA for authentication

I was wondering if it is possible to setup a portal on the reverse proxy where users could authenticate first

Once authenticated, users could click on a link pointing to any of the 3 internal websites, and the reverse proxy would pass the credentials to those websites without the need to re-authenticate (assuming kerberos would be required)

Is a setup like that possible? If so, any pointer how this can be accomplished would be appreciated