#iis8

[aprenticedev]

Assigning File Permission For ApplicationPoolIdentity in IIS 8

Everything was going fine after publishing a new web application to IIS 8 on Windows Server 2014. Then suddenly I saw few errors in logs like:

System.UnauthorizedAccessException Access to the path 'C:\inetpub\wwwroot\wodnerful-app\reports\Q1 2017.pdf' is denied. at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath) at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost) at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String msgPath, Boolean bFromProxy) at System.IO.FileStream..ctor(String path, FileMode mode) at WonderfulApp.Controllers.Api.Reports.d__4.MoveNext()

The files were under root application folder. The application was running under ApplicationPoolIdentity in its own application pool.

I checked the permissions on folder for following principals/groups:

IIS_User

IUSR

Authenticated Users

Network Service

Well, all had the read and execute permissions.

Clearly the ApplicationPoolIdentity under which the website was running was not (or part of) anyone of the above.

I looked at it in Task Manager and it showed WonderfulApp as user running this (w3wp.exe) process.

It seemed straightforward at this point: go to the folder, right-click select Properties>Security>Advanced>Add>Select a principal> type user name in the box and click Check Names button.

But whatever I did, it was not getting the WonderfulApp user/principal that was shown in Task Manager.

After fiddling around and googling about it, I stumbled upon this answer on Severfault. It required to type IIS APPPOOL Yep those are 3 Ps before the WonderfulApp like this: IIS APPPOOL\WonderfulApp.

Giving appropriate permissions to IIS APPPOOL\WonderfulApp made it work

So in short, if your app is running under ApplicationPoolIdentity and you are not impersonating, your user name should be IIS APPPOOL\ApplictaionPoolName

Happy Coding!

[byronpate]

IIS Configuration Restore

If you’ve ever made a change in IIS and then your websites stop loading, you quickly start looking for a way to restore your last config. Luckily IIS7 introduced a feature called Configuration History that automatically backs up your config when it detects a change. Here’s how to make use of those backups and perform an IIS Configuration Restore, as well as how to manually backup your…

View On WordPress

[ccomptonnc]

List web sites with PowerShell

I had this code already:

PS> Import-Module WebAdministration PS> Get-ChildItem -Path IIS:\Sites

But that wasn’t working for me, the columns wrapped in a way that was a pain to reformat and I wanted more information.

So I decided to get all of the columns

PS> Get-ChildItem -Path IIS:\Sites | Format-Table -Property * -AutoSize | Out-String -Width 1300 | Out-File sites20160308-wide.txt

But a lot of those fields were either redundant or didn’t tell me much, plus NotePad.exe wraps text at the thousandth column whether there’s a line break or not.  So I pulled out all of the columns, then eliminated the ones that weren’t likely to be useful to me.

PS> Get-ChildItem -Path IIS:\Sites | select name, id, serverAutoStart, state, applicationPool, enabledProtocols, physicalPath, Attributes, ChildElements, Methods, logFile, traceFailedRequestsLogging | Format-Table -Property * -AutoSize | Out-String -Width 900 | Out-File sites20160308-subset.txt

That was what I needed.

The next project in this series will be to in-line decode the fields logFile and traceFailedRequestsLogging so I can store that output and have a good snapshot of how IIS is configured.  (Both of those fields output as “Microsoft.IIs.PowerShell.Framework.ConfigurationElement” which I expect I can turn in to something useful when I have more time.)

[ccomptonnc]

List IIS sites with PowerShell (names, IDs, path, bindings)

You will need the WebAdministration module

Start PS with the “Import System Modules” option   -or- Use “Import-Module WebAdministration”

PS> Get-ChildItem -Path IIS:\Sites

Resulting columns: Name (16 char), ID, State (started or stopped), Physical Path (30 char; FQDN),   Bindings (60 char; format = ftp | http | https + IP:Port +:+ URL)

[edztechorg-blog]

New Post has been published on EDZTECH

New Post has been published on https://edztech.org/what-is-iis-internet-information-server/

What is IIS - Internet Information Server

Internet Information Server (IIS) is one of the most popular web servers from Microsoft that is used to host and provide Internet-based services to ASP.NET and ASP Web applications. A web server is responsible for providing a response to requests that come from users. When a request comes from client to server IIS takes that request from users and process it and send response back to users.

Internet Information Server (IIS) has it’s own ASP.NET Process Engine to handle the ASP.NET request. The way you configure an ASP.NET application depends on what version of IIS the application is running on.

Internet Information Server (IIS) includes a set of programs for building and administering Web applications, search engines, and support for writing Web-based applications that access databases such as SQL Server. With IIS, you can make your computer to work as a Web server and provides the functionality to develop and deploy ASP.NET Web applications on the server. You can also set security for a particular Website for specific Users and Computer in order to protect it from unauthorized access.

IIS helps organizations to increase Web sites and application availability while lowering system administration and cost of deployment.

IIS supports HTTP, HTTPS, FTP, FTPS, SMTP and NNTP.

[timothylam]

[philholly]

Processwire 2.3 web.config for IIS IIS7 IIS8

Taken from: http://processwire.com/talk/topic/268-processwire-on-windows72008-server-with-iis-webserver/

I had to modify it slightly (comment out the configSections) to get it to work. I'm using this in a current project right now.

<?xml version="1.0" encoding="UTF-8"?> <configuration> <!--<configSections> <sectionGroup name="system.webServer"> <sectionGroup name="rewrite"> <section name="rewriteMaps" overrideModeDefault="Allow" /> <section name="rules" overrideModeDefault="Allow" /> </sectionGroup> </sectionGroup> </configSections>--> <system.webServer> <security> <requestFiltering> <denyUrlSequences> <add sequence=".inc" /> <add sequence=".info" /> <add sequence=".sh" /> <add sequence=".sql" /> <add sequence="\..*" /> </denyUrlSequences> <fileExtensions> <add fileExtension=".sql" allowed="false" /> </fileExtensions> </requestFiltering> </security> <directoryBrowse enabled="false" /> <rewrite> <rules> <rule name="Handle request for missing favicon.ico" stopProcessing="true"> <match url="favicon\.ico" /> <action type="CustomResponse" statusCode="404" subStatusCode="1" statusReason="The requested file favicon.ico was not found" statusDescription="The requested file favicon.ico was not found" /> </rule> <rule name="Handle request for missing robots.txt" stopProcessing="true"> <match url="robots\.txt" /> <action type="CustomResponse" statusCode="404" subStatusCode="1" statusReason="The requested file robots.txt was not found" statusDescription="The requested file robots.txt was not found" /> </rule> <rule name="Access Restrictions: Keep web users out of directories"> <match url="(^|/)\." ignoreCase="false" /> <action type="CustomResponse" statusCode="403" statusReason="Forbidden" statusDescription="Forbidden" /> </rule> <rule name="Access Restrictions: Protect ProcessWire system files" stopProcessing="true"> <match url="^.*$" ignoreCase="false" /> <conditions logicalGrouping="MatchAny"> <add input="{URL}" pattern="(^|/)site/assets/(cache|logs|backups|sessions|config|install)($|/.*$)" ignoreCase="false" /> <add input="{URL}" pattern="(^|/)site/install($|/.*$)" ignoreCase="false" /> <add input="{URL}" pattern="(^|/)site/config\.php$" ignoreCase="false" /> <add input="{URL}" pattern="(^|/)(wire|site)/templates-admin($|/|/.*\.(php|html?|tpl|inc))$" ignoreCase="false" /> <add input="{URL}" pattern="(^|/)site/templates($|/|/.*\.(php|html?|tpl|inc))$" ignoreCase="false" /> <add input="{URL}" pattern="(^|/)site/assets($|/|/.*\.php)$" ignoreCase="false" /> <add input="{URL}" pattern="(^|/)wire/(core|modules)/.*\.(php|inc|tpl|module)$" ignoreCase="false" /> <add input="{URL}" pattern="(^|/)site/modules/.*\.(php|inc|tpl|module)$" ignoreCase="false" /> <add input="{URL}" pattern="(^|/)(COPYRIGHT|INSTALL|README|htaccess)\.txt$" ignoreCase="false" /> <add input="{URL}" pattern="(^|/)site-default/" ignoreCase="false" /> </conditions> <action type="CustomResponse" statusCode="403" statusReason="Forbidden" statusDescription="Forbidden" /> </rule> <rule name="ProcessWire Rewrite" stopProcessing="true"> <match url="^(.*)$" ignoreCase="false" /> <conditions logicalGrouping="MatchAll"> <add input="{URL}" pattern="^/~?[-_.a-zA-Z0-9/]*$" ignoreCase="false" /> <add input="{REQUEST_FILENAME}" matchType="IsFile" ignoreCase="false" negate="true" /> <add input="{REQUEST_FILENAME}" matchType="IsDirectory" ignoreCase="false" negate="true" /> <add input="{REQUEST_FILENAME}" pattern="(favicon\.ico|robots\.txt)" ignoreCase="false" negate="true" /> <add input="{URL}" pattern="\.(gif|jpg|png|ico)$" negate="true" /> </conditions> <action type="Rewrite" url="index.php?it={R:1}" appendQueryString="true" /> </rule> </rules> </rewrite> </system.webServer> </configuration>

[mydeveloperstory-blog]

Configuring WCF on IIS 8

I'm not really into configuring IIS. Well, today I had to make a WCF service work on IIS 8 in our office dev environment. Luckily I found this post.

From the server Home page: 1: Mime Types -> Add... Provide .svc as the File name extensions and application/octet-stream as Mime Type.

2: Handler Mappings -> Add Managed Handler... Provide *.svc as the Requested path, System.ServiceModel.Activation.HttpHandler as Type and lastly svc-Integrated as Name (can probably be anything). Now you can host WCF services in IIS 8 (as far as I know).