Hot answers tagged

105

Recycling Recycling is usually* where IIS starts up a new process as a container for your application, and then gives the old one up to ShutdownTimeLimit to go away of its own volition before it's killed. *- usually: see DisallowOverlappingRotation / "Disable overlapped recycle" setting It is destructive, in that the original process and all its state ...


62

In services.msc set World Wide Web Publishing Service (W3svc) to manual instead of automatic start.


60

iisreset will stop and start the World Wide Web Publishing Service. This, of course, applies to all of your application pools. I'm sure you noticed a process being created for each application pool. This process will handle requests for all websites associated with it. When you recycle an application pool, IIS will create a new process (keeping the old one) ...


58

There is no "patch". It's a vulnerability in the protocol, not a bug in the implementation. In Windows Server 2003 to 2012 R2 the SSL / TLS protocols are controlled by flags in the registry set at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\Schannel\Protocols. To disable SSLv3, which the POODLE vulnerability is concerned with, ...


54

When you have IIS Manager open, you can click Help -> About to see the version.


53

There's a fairly good chance you're missing the correct VC++ runtime for the version of PHP you're running. If you're running PHP 5.5.x you need to ensure the VC++11 runtime is installed: http://www.microsoft.com/en-us/download/details.aspx?id=30679 Make sure you download and install the x86 version (vcredist_x86.exe), PHP on Windows isn't 64 bit yet. ...


49

Also check this answer from here: Cannot manually edit applicationhost.config The answer is simple, if not that obvious: win2008 is 64bit, notepad++ is 32bit. When you navigate to Windows\System32\inetsrv\config using explorer you are using a 64bit program to find the file. When you open the file using using notepad++ you are trying to open it using a 32bit ...


46

The numbers on the folders correspond to the Site ID of each specific site in IIS. If you go into Internet Manager you can see the Site ID's by clicking on the Sites node in the navigation pane. So, if a site has ID 1 its log folder name is W3SVC1, ID2 = W3SVC2, etc. You could also review %WinDir%\System32\Inetsrv\Config\applicationHost.Config, which ...


45

Its does work in GUI... Just make sure the the 'friendly name' of the cert you are installing is the same as the multidomainname you have made for the cert. ie. *.companydomain.com if you put in 'Nice friendly name' for *.companydoman.com cert, when installing the cert into IIS, it will grey out the host name header box. If you use *....


43

Well, start off by checking if it is installed. Control Panel > Programs > Programs and Features > Windows Process Activation Service


41

Figured it out. The issue is documented here. Basically, you have to run: sc sidtype ftpsvc unrestricted And then restart the FTP service: net stop ftpsvc & net start ftpsvc From what I can tell, it's a bug in R2. Go figure.


41

Microsoft IIS server does not support SFTP (or SSH) at all, on any version of IIS or Windows. IIS supports secure FTP (FTPS or FTP over TLS/SSL) though. It's a different (incompatible) protocol than SFTP, but most "FTP" clients support both SFTP and FTPS. When setting up an FTPS server, make sure you disable plain (unencrypted) FTP! See (my) guide on ...


35

The IIS URL Rewrite Module 2.1 for IIS7+ may be your friend. The module can be downloaded from IIS URL Rewrite. Using the URL Rewrite Module and URL Rewrite Module 2.0 Configuration Reference explain how to use the module. Once the module is installed, you can create a host wide redirect using IIS Manager. Select URL Rewrite, Add Rule(s)..., and Blank rule. ...


32

Milliseconds is correct. A time-taken value of 1000 is one second. You'll find that the numbers are often 53ms or other low values like that for your static images and files, and the time-taken value increases from there depending on the page and how quickly it runs.


27

I stumbled upon this question when I had the same problem today. I set the "Data Channel Port Range" in IIS 7.5 Manager console, but the server kept picking ports outside the specified range. The issue for me wasn't a firewall rewriting the response (I was using TLS, so it couldn't, even if it tried). Actually, after you change the port range, you have to ...


27

At Tech Ed 2003, the presenter was asked this question, and the answer was that they wanted an irregular cycle to prevent it from occurring on a daily boundary (e.g. to distinguish from other daily tasks scheduled on the server / domain). The site here(Link dead) speculated: ... (29 is the) first prime after 24, allowing it to have the least chance ...


27

Facepalm New VPS box, means default behaviour. i.e. "Hide file type extensions for known types". When I turned that off, I discovered my file was actually named index.html.txt. Renamed it to index.html and problem solved.


26

It is just a hole finder script. The requests made are typically the following ones, if your servers answers all with a 404 error, you do not have anything to worry about. 111.221.1.140 - - [20/Nov/2013:10:15:56 +0000] "GET //xampp/phpmyadmin/scripts/setup.php HTTP/1.1" 404 1787 "-" "-" 111.221.1.140 - - [20/Nov/2013:10:15:55 +0000] "GET //websql/scripts/...


26

Traditionally, it's always been one version of IIS to one operating system. Windows XP - IIS 5.1 Server 2003 - IIS 6 Server 2008 - IIS 7 Server 2008 R2 - IIS 7.5 I see no sign of this changing in the immediate future.


26

A person with administrative (or often even physical) access to a server is going to be able to extract the private key. Whether through exporting, memory sniffing, or other such trickery. Your administrators have access to the private keys of your web servers. Accept this as fact, and work around that. If your sysadmins aren't trustworthy, then you may ...


25

I finally got it to work, but there's some things I've learnt: IIS will let you configure the ports that the FTP server will use for passive mode. But, for me, this did NOT take affect until I restarted the service named "Microsoft FTP Service" When I looked at the inbound firewall rules, I saw three preconfigured rules: FTP Server (FTP Traffic-In) FTP ...


24

Just for ease of installation I derived this "disable ssl 2 and 3.reg" file from Evan's answer above: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server] "Enabled"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\...


23

What you are looking for is the appcmd command. Take a look at its TechNet manual. To list your sites out: %windir%\system32\inetsrv\appcmd list site To restart your site, stop it and then start it: appcmd start site /site.name:string or appcmd stop site /site.name:string


23

You can change the default location on a per website/application basis by editing the Configuration section of the Web.config file. <system.web> <compilation tempDirectory="D:\MyTempFiles" /> </system.web> The application will re-compile and the files will be stored at this new location, after which you can safely remove the old ...


22

I ran into the same issue with a GoDaddy SSL certificate on Windows 2012 / IIS 8. What worked in my case, after getting the "Failed to Remove Certificate" error, was this: I have tried adding it again, this time getting an "Access Denied" error. I have also tried adding it to the "Personal" store instead of "Web Hosting" but same "Access Denied" error ...


21

No. Microsoft offers an FTP over SSL (FTPS) solution but does not currently provide a solution for securing FTP traffic using FTP over SSH (SFTP)


20

netsh http add urlacl url=http://+:80/ user=Everyone Note that the valid value for user actually depends on your system language (Everyone for English, Jeder for German).


20

I had a similar problem. This thread https://stackoverflow.com/questions/2374957/asp-net-mvc-on-iis-7-5 solved it for me. Basically try adding this to your web.config: <system.webServer> <modules runAllManagedModulesForAllRequests="true"/> </system.webServer> If that work you can try removing it and install this hotfix instead: http:/...


20

Http/2 requirements as per https://http2.github.io/http2-spec/#rfc.section.9.2.2 : 9.2.2 TLS 1.2 Cipher Suites A deployment of HTTP/2 over TLS 1.2 SHOULD NOT use any of the cipher suites that are listed in the cipher suite black list (Appendix A). Endpoints MAY choose to generate a connection error (Section 5.4.1) of type INADEQUATE_SECURITY if ...


19

The display name in the services list is "Simple Mail Transfer Protocol (SMTP)" Set the Startup Type to Automatic You may also want to select the Recovery tab and set the service to restart on failures.


Only top voted, non community-wiki answers of a minimum length are eligible