IIS7 - UI & Remote Management

IIS 6 Management Compatibility

6cmcm5 — Tue, 10 Jun 2008 18:56:11 GMT

Is there any downside to enabling IIS 6 Management Compatibility? Should i enable it while running my scripts and disable it when complete?

Problem installing SSL certificate: ASN1 bad tag

diholaiis — Thu, 19 Nov 2009 11:26:14 GMT

Hi all,

I issued a certificate request and when I received it form GoDaddy, I ent to IIS and followed the Complete Certificate Request wizard. It all went well but noticed a typo in the "Name" field that IIS allows you to enter. Not being able to edit it, I removed the certificate from IIS (silly me) hoping to repeat the process again, this time correcting the typo. However when I try to do this, IIS says: ASN1 Bad Tag.

How can I install the certificate, any ideas?

Many thanks!

Setting SSL Settings with Microsoft.Web.Administration

mikesm — Tue, 17 Nov 2009 19:06:07 GMT

We have a C# application that is used to remotely manage our web applications. One of its functions is create and populate new virtual directories (Applications in IIS 7) on our web servers. The application was written to work with IIS 6 serveral years ago. We have now moved to all our systems to IIS 7 (Windows 2008). We want to updated this application to use the Microsoft.Web.Administration namespace classes rather than using the System.DirectoryServices classes that are currently used. This will allow us to leave the IIS 6 Compatibility components out of new Windows installations.

I had no problems getting the Microsoft.Web.Administration classes to create new applications on our IIS 7 machines, but I can not figure out how to set the SSL setting on an application or for that matter on a web site using these classes. Any idea how it is done? We run a mix of web applications on a web site so that one application will require SSL and another application on the site will not.

Delegation of all IIS rights, just not full Windows admin rights

Paul Schwartz — Mon, 09 Nov 2009 20:21:24 GMT

Scenario:

I have multiple web servers that need to have developers/implementers (5-15 people with unique logins) with access to add/change/delete IIS virtual directories and applications. I would love to have them stop being members of local admin on the box and only give them IIS admin rights.

I was very excited to read about the Delegation of permissions in IIS. I've been playing around with it and think I've bumped into a limitation I've read in 2 posts.

I used the legacy Power Users group and assigned "IIS Manager Permissions" to it. I also assigned some file permissions that would be required in the application folder root. I also gave it rights to edit the ApplicationHost.config file as noted in the "Mark Folders as Applications" Rule inside of 'Management Service Delegation'.

I've tried multiple settings for the 'createApp' Rule that is created with "Mark Folders as Applications" Rule and I can't find anything that gives the "right-click" functionality in the IIS Manager GUI for non-admins.

Is this just impossible. and I must continue to grant full admin rights to the server for this feature?

Using Microsoft.Web.Administration on a remote machine not in the domain

lonevvolf — Fri, 30 Oct 2009 12:02:10 GMT

I'm banging my head against a wall, trying to get this to work. I have the following situation: Machine A should run a program which uses Microsoft.Web.Administration to connect to and manage IIS on Machine B. Machine A is in domain A. Machine B is not in a domain. User A exists in domain A. User A exists with the same username and password on Machine B. When I enable Remote Administration on Machine B, and connect through IIS Manager on Machine A, it asks for credentials. I enter them without a domain name, and everything works perfectly. The question is, how can I connect to and manage Machine B from Machine A programmatically? Doesn't the IIS Remote Management also use the Microsoft.Web.Administration? I can't impersonate (as far as I can tell), because Machine B isn't in the domain. I also can't find any way to send credentials when using ServerManager.OpenRemote(); Please help!

Using Microsoft.Web.Administration.dll to administer IIS 6 servers

jofanon — Fri, 30 Oct 2009 10:58:40 GMT

Hey,

I have an IIS 7 webserver and I'm using it as a proxy using ARR.

The downstream webservers are IIS 6 and I want to run admin scripts from the proxy (using ServerManager.OpenRemote) to these servers. For example, recycling app pools that kind of thing.

Can the Microsoft.Web.Administration.dll administer IIS 6 servers?

When I run my code I get...

System.Runtime.InteropServices.COMException (0x80040154): Retrieving the COM class factory for remote component with CLSID {2B72133B-3F5B-4602-8952-803546CE3344} from machine tes10web98 failed due to the following error: 80040154.
   at System.RuntimeTypeHandle.CreateInstance(RuntimeType type, Boolean publicOnly, Boolean noCheck, Boolean& canBeCached, RuntimeMethodHandle& ctor, Boolean& bNeedSecurityCheck)
   at System.RuntimeType.CreateInstanceSlow(Boolean publicOnly, Boolean fillCache)
   at System.RuntimeType.CreateInstanceImpl(Boolean publicOnly, Boolean skipVisibilityChecks, Boolean fillCache)
   at System.Activator.CreateInstance(Type type, Boolean nonPublic)
   at Microsoft.Web.Administration.ConfigurationManager.CreateWritableAdminManager(WebConfigurationMap webConfigMap, String configPathToEdit, Boolean isAdminConfig)
   at Microsoft.Web.Administration.ConfigurationManager.CreateConfiguration(WebConfigurationMap configMap, String configPathToEdit, Boolean isAdminConfig)
   at Microsoft.Web.Administration.ConfigurationManager.GetConfiguration(String rawConfigurationPath, String cacheKey, Boolean isAdminConfig)
   at Microsoft.Web.Administration.ServerManager.get_ApplicationPoolsSection()
   at Microsoft.Web.Administration.ServerManager.get_ApplicationPools()
   at IISAdminTools.Program.RecyleAppPools()
   at IISAdminTools.Program.Main(String[] args)

can i see the 'path' in content view?

merk — Thu, 22 Oct 2009 19:50:26 GMT

In IIS6 admin when i open a website and it displays all the content, one of the items it displays is the 'path' info. This is useful to me since it shows which pages might have IIS redirects associated with them.

however, in IIS7 this is missing. Is there any way to add this back in? It doesn't seem as though I can change which columns appear in the content view.

Remote Management - Changing Host Headers

rkr31 — Fri, 23 Oct 2009 12:52:14 GMT

Im using win2008 R2 and would like to allow remote management users the ability to change host headers (bindings). Is there something i can do to activeate this? The seeting is not in the feature delegation bit on iis

thanks

Richard

remote admin using domain users

rkr31 — Mon, 19 Oct 2009 10:10:41 GMT

Hi

I have a webfarm and intend to allow the IIS Remote Manager access to my clients. The only problem i have with this is that all my users are domain based rather than local and i would rather not expose my end users to the name of the internal domain. Currently i can log on happily using Remote manager using domain\user username. I really want to try and omit the domain\ part of it so that users simply type user to get access. Is this possible? In the ftp authentication section we can set a default domain. Is there any such setting here?

Thanks

Richard

Which hosting providers allow IIS7 Remote Admin?

ChgoChad — Mon, 09 Feb 2009 03:17:21 GMT

I've been researching shared hosting providers that are offering IIS7 hosting. One of the features that is on my 'must-have' list is to be able to use the delegated administration feature and control my hosting account via the IIS7 Remote Administration manager.

I'm finding that while there are quite a few hosting providers that offer IIS7, only one out of the dozens I've found actually offers the use of the delegated administration feature. If someone has the name of a host that offers IIS7 remote admin, please pass it along...

Thanks,
Chad

"Connect to remote server" is missing

virshu — Thu, 17 Sep 2009 16:36:52 GMT

It's got to be something simple, since nobody else is having this problem. Yet I have exactly the same situation on three machines (all Vista SP2; one x86 and two x64).

Essentially, there is no "connect to remote server button" on the Connections tab of IIS manager. All I get is "Up" icon:

So, I can't even start remote management...

Puzzled..
Felix

EDIT: I don't know why I wasn't able to attach a screenshot... but it's here:

http://www.rabinovich.org/tmp/iismanager.JPG

iis 7 remote management

amackan — Thu, 01 Oct 2009 07:55:23 GMT

Hi, we in the process of migrating from windows 2003 iis6 & windows 2008 iis7 all std editions.

Currently when we apply software updates to our site, we have a simple batch file running on our desktop pc's which connect to the remote iis6 server, shut down the web site, update the software, and then restart the web site. we use the iisweb command.

now tried the same connecting to the iis7 server, but no joy, cant connect. if i try running iiswen locally on the iis7 server, its not reconised. any ideas at all.

many thanks

Could not connect to the specified computer

itsmenique — Thu, 10 Sep 2009 07:10:51 GMT

Hi, I was able to configure WMSVC on the remote server successfully, also added user access and all, but on my client Machine I'm receiving the error below, btw the firewall is currently disabled for both machines. Can you advice what's the error is referring to, Could not connect to the specified computer Details: The underlying connection was closed: The connection was closed unexpectedly. regards Dom

AppCmd or different tool?

jiffypopjr — Wed, 09 Sep 2009 14:52:27 GMT

I would like to remotely manage an IIS 7 server from a different computer via scripts (to plug in to an automated build process). AppCmd does not appear to have a -server flag. Is there a better tool or am I missing something in AppCmd. I want to be able to BoxA to control the sites and app pools on BoxB. Both are running W2k8 64 bit.

can't add remote site HELP!!

ukjinplant — Sun, 16 Aug 2009 05:11:10 GMT

(sorry to poor english, but I couldn't find this solution in korean communities.)

Server : Windows 2008 SP2 & IIS 7.0

Client : Windows XP SP3, .NET framework installed 3.5, IIS Manager 7.0

(both used korean language)

I turned on WMSVC and authoring rules set to "Windows user and IIS User")

and added 1 IIS user, and authorized to web site.

and, I checked firewall opened wmsvc service port.(8172)

but client can't connect server to host with this message

"Microsoft.Web.Management.Remoting.HttpChannel" Exception Throwed.

Is that client problem? or server problem?

404 Page cannot be found...connecting via port 8172

scoobaspeaz — Sun, 16 Aug 2009 01:27:43 GMT

For some reason i cannot connect to IIS remotely using the web interface. When i type https://192.168.1.5:8172 i get a username/password log in prompt but after i enter in the information i get directed to a 404 page cannot be found reply. Any idea as to how to solve this? I have googled this and am unable to find a solution.

I have IIS installed.

I have the Web Management Service installed and running

I am using the administrator account.

Am i missing some step?

Remote Management issue - error using a low privledged domain user

javon7065 — Tue, 04 Aug 2009 18:01:01 GMT

Hello. When trying to connect at the site level, I get the below error after clicking on Finish at the "Specify a Connection" screen:

"There was an error when trying to connect. Do you want to retype your credentials and try again?

Details:

Requested registry access is not allowed"

Of course, when I connect using my account that is a domain admin, there is no issues

Any ideas?

thanks,

joe

IIS 7 Remote Admin issue

javon7065 — Mon, 03 Aug 2009 20:59:39 GMT

Hello. New to IIS 7. Trying to connect from a Windows XP SP3 machine to Windows Server 2008 SP2. I am getting this error:

Could not connect to the specified computer

Details: The remote server returned an error: (410) Unauthorized

I am connecting as myself, a domain admin, who is an admin both on my workstation and the server in question. From what I understatnd and read so far, this is a permission problem. But where?

It says that admins can automatically connect to the site. it shows this in the WMSvc log:

2009-08-03 20:53:18 172.1x.x.x POST /Service.axd Module=Framework&Method=GetWebManagementInfo 8172 - 172.x.x.x WebManagementShell|7.0.0.0|2.0.50727.3082|System.Windows.Forms.Control 401 2 5 15
2009-08-03 20:53:18 172.x.x.x POST /Service.axd Module=Framework&Method=GetWebManagementInfo 8172 username 172.x.x.x WebManagementShell|7.0.0.0|2.0.50727.3082|System.Windows.Forms.Control 401 1 1326 0
2009-08-03 20:53:43 ::1 GET /ping.axd - 8172 - ::1 Mozilla/4.0+(compatible;+Win32;+WinHttp.WinHttpRequest.5) 200 0 0 0

thanks,

joe

IIS Remote Manager and Vista SP2 Compatibility

rcartmell — Tue, 21 Jul 2009 20:21:12 GMT

It appears that 2008/Vista SP2 may have negatively impacted some of the management features when using IIS 7 Remote Manager to administer an IIS 7 site. For example, when attempting to manage the 'Error Pages' settings, I am receiving the following error. I wanted to see if anyone else is experiencing this issue and whether or not there are any solutions other than waiting for the next release of the management tool. Thanks in advance.

There was an error performing this operation.

Details:

Object reference not set to an instance of an object

Redirect Incoming Connection 8080 to 80 Help!...

VcDeveloper — Wed, 22 Jul 2009 01:13:09 GMT

OS: Windows Server 2008 Std w/Hyper-V HD Support

I have my own server in my office and I use a service NO-IP (here's the link just incase you don't know about this company) to have my domain name point to my server. But my ISP service is a company called ClearWire. To make a long story short they are blocking port 80.

I had to re-configure my connection to redirect to port 8080, but NO-IP has to send the IP address instead of the domain name. Know instead of the domain name displaying in the users browser bar it's my IP address.

My web server setup is like this: I have a VHD with Windos 2008 Web Server for internet connections for my users and I don't wont my IP address showing in there browser.

I was thinking if this was possible to recieve the port 8080 connection on the host and redirect the connect normally to my VHD. By doing this I would define my domain name in the host file with the network IP address of the VHD. This way the domain name would appear in the users browser.

So, 1) Any suggestions and additions to this, 2) would this work and 3) would this be a performance problem?

web based management

Sjoerdvdn — Fri, 17 Jul 2009 10:34:07 GMT

Hello,

Within windows 2003/IIS 6.0, there is a web based management tool to create websites, ftp sites and the appropiate users. I understand this isn't availible anymore within IIS 7.0, but is there a other program that can do this (free if possible)?

I know the IIS 6 tool wasn't perfect but it was ok for me.

Regards,

Sjoerd

How to set cache control for static content

pkorona — Thu, 25 Jan 2007 21:04:41 GMT

I would like to set a maxage value for entities in my images directory, but I can find no way to do so. The IIS 7.0 Beta help indicates there should be a UI element for HTTP Headers, but there is none. None of the release documentation mentions this element.

I tried using appcmd as well, but it didn't seem to have any effect.

Currently the Last-Modified header is returned, so subsequent requests respond with 304 (Not Modified), but I would like the browser to just use it's local cache most of the time.

Thanks

Read default values of schema

DF_Frederic — Mon, 13 Jul 2009 03:28:12 GMT

I know that it's possible to define default values in the schema for attributes. This is useful but let's say that I defined some default value for attributes inside a collection. How can I get those values so when the user try to add a new item to the collection, the screen can show them? I don't want to hard code them in the screen since they are defined in the schema.

Thanks for any information on this subject.

By the way, I posted a message in the module section regarding localization of the administration screen. I guess it was in the wrong section and I should write it back there. I don't know if I can just delete the thread and write it back here. For now, even thought the locale is the good one, only the default language is used.

Delegate Add Application

jriddle — Fri, 10 Jul 2009 13:56:42 GMT

Hi,

We currently have an IIS 7.0 server with various sites hosted on it for different organisations. These organisations have developers who would like to add applications through the IIS 7.0 Manager but they dont get the option; is this something that can be delegated and if so how?

We really dont want to give them RDP admin access to the servers.

Thanks

Marc

The remote server returned an error: (401) Unauthorized.

christophw — Thu, 10 May 2007 09:56:40 GMT

I tried remote management; dl'ed the Web Manager, installed on Vista. Enabled and started the Management Service. Connected. It told me about the certificate. And then I got the nice unauthorized dialog box. However, I tried to login using the Administrator acoount (via Specifiy credentials on the second step). I was under the impression that the Administrator is granted server-level remote administration by default? Or did I miss a step?

Chris