iis

Netcraft: IIS now serves 50 Million Hostnames!

I was going through some data on IIS webservers today and came across Netcraft , which is a website that gives monthly statistical data on webservers from different companies and some other interesting stuff. Not sure if this data can be taken official or not but what really excited me was the number of hostnames that were running on IIS. Microsoft Web Server has hit the BIG number of 50 Million hostnames from which Netcraft has recieved response . Now, yes, I know what you must be thinking. We all...( read more ) Read More...

IIS Solution Center and More

Apparently a lot of people including me regularly search for support articles related to IIS for solutions. Today with no real work on hand I decided to save a few IIS related articles so that I can have a database at a central location. When I visited the Microsoft Support Solution center for IIS, I realised that a great location was already available with all the information. Solution Center as the name suggest is a central repository of not just the support articles but also a lot of great "How...( read more ) Read More...

ASP.NET MVC Framework and IIS: What's the connection?

"Can you tell me as to how ASP.NET MVC is processed in IIS?" I came across this interesting question from a member of my audience when I was giving a session for Community Techdays a few days back. I am not much of an ASP.NET developer therefore as much as I would hate to I had to say "Let me get back to you later on that". So here's what I have figured out so far: ASP.Net MVC or ASP.Net M odel V iew C ontroller was introduced with .Net 3.5. The basic difference between an ASP.Net application and...( read more ) Read More...

IIS Security: Semi-colons in URL

IIS security guy Nazim Lala has just blogged about a IIS 6 security issue, related to the use of Semi-colon (;) in a URL. It's not much of an issue if your IIS 6 server is properly configured. Good example of how Best practices can make your day. For more technical info do read the blog and check your servers for anything like that. It's always good to double check than to suffer right... Have fun... Hopefully see you in new year!!! Update: Info also present on MSRC Team Blog...( read more ) Read More...

Why should I use Web Platform Installer?

This is one question I have often heard from a lot of people. I had written about this a long time back and yet find it interesting enough to give it another shot. For those who are not aware... Web platform installer is a free tool from Microsoft which lets you download, install and configure tools and utilities under the Microsoft Web Platform umbrella. So that includes IIS, Web Tools and Extensions from Microsoft, Runtime Frameworks, Development tools (These are express editions ofcourse) and...( read more ) Read More...

Where is the IIS Admin Service in IIS 7???

Question: Hello, I am pretty new to IIS 7. I have just recently started working on IIS 7 test boxes at my office. I installed default IIS 7 and was very happy but I think I have missed something as I am not able to find the IIS Admin Service. However, my IIS box seems to be running fine. On my IIS 6 production box I can see the service and IIS 6 does not work at all without the IIS admin Service started. What am I missing? It might sound a little new to you but IIS Admin Service in not required in...( read more ) Read More...

IIS Security – Past and Present

This topic has been covered many times both by Microsoft and non-Microsoft employees. However, I’ve recently been asked what the main features of IIS 7 are and have seen a great deal of misinformation about IIS security on twitter, blog posts and forums. I think, therefore, the issue deserves yet another look. In this post, I’m going to go over security in the past for IIS and then move on to talk about security features in IIS 7. These are not in any particular order. This post is not meant to diminish the many thoughtful works already created by others – both complimentary and critical. This is just meant to bring the subject back up for discussion again in hopes that you can be properly equipped with the decision making information you may need. Ghosts of IIS Security Past The reason for so much misinformation about the current state of security in IIS is likely due to the earned reputation the product had in versions previous to IIS 6.0. A quick search on the web for IIS 5 security...