1. Module 3: Managing Web Applications with IIS 7.0

2. Overview Explain management approaches for IIS 7.0 Use the IIS 7.0 configuration system Grant non-administrative users access to IIS 7.0 configuration settings

3. Lesson 1: Managing IIS 7.0 Explain management approaches for IIS 7.0 Use appcmd.exe to perform basic administration tasks List methods for configuring IIS 6.0 compatibility SSL Configuration Requesting SSL Certificates Renewing SSL Certificates Importing and Exporting Certificates

4. IIS Manager Configure IIS settings Install and remove IIS features Control delegation Remote administration Extensible

5. Appcmd.exe C:\> appcmd list requests REQUEST "fb0000008000000e" (url:GET /wait.aspx?time=10000,time:4276 msec,client:localhost) C:\> appcmd list requests REQUEST "fb0000008000000e" (url:GET /wait.aspx?time=10000,time:4276 msec,client:localhost) Quick, efficient access to new IIS 7.0 configuration Mirrors *.vbs files from IIS 6.0 Built-in “pipe” support C:\> appcmd list sites SITE "Default Web Site" (id:1,bindings:HTTP/*:80:,state:Started) SITE "Site1" (id:2,bindings:http/*:81:,state:Started) SITE "Site2" (id:3,bindings:http/*:82:,state:Stopped) C:\> appcmd list sites SITE "Default Web Site" (id:1,bindings:HTTP/*:80:,state:Started) SITE "Site1" (id:2,bindings:http/*:81:,state:Started) SITE "Site2" (id:3,bindings:http/*:82:,state:Stopped)

6. Compatibility WMIv2 and ADSI Scripts Supported Installing Metabase compatibility easy Admin Base Object (ABO) calls mapped to new configuration system Relies on Inetinfo.exe service

7. Requesting SSL Certificates Obtain a certificate Create the SSL Binding Verify the SSL Binding Configure SSL Settings

8. Renewing SSL Certificates

9. Importing and Exporting Certificates

10. Lesson 2: Using Hierarchical Configuration Settings Describe the IIS 7.0 configuration system Describe the function and format of section groups Describe the function and format of sections Describe the function and format of elements Describe the function and format of collections Describe the function and format of attributes Describe the function and format of locations Described the hierarchy of configuration files Describe the IIS 7.0 configuration file schema Work with schema files

11. IIS 7.0 Configuration Concepts Main configuration in applicationHost.config Consistent with ASP.NET web.config Two main groupings of settings:  system.applicationHost  system.webServer

12. Section Groups

13. Sections

14. Elements

15. Collections

16. Attributes

17. Locations

18. Hierarchy of Configuration Files.NET Framework settings Sites machine.configroot web.configapplicationHost.config ASP.NET settings Main IIS 7.0 settings web.config Optional web.config Applications Virtual Directories

19. Lesson 3: Delegating Configuration to Non- Administrator Users Grant non-administrative users access to IIS 7.0 configuration settings. Lock individual configuration settings in IIS 7.0. Describe default locking configuration for IIS 7.0 configuration settings. Describe locking sections. Implement granular locking. Describe lockAttributes & lockAllAttributesExcept. Describe the function of lockElements. Describe the function of lockElements add remove clear statements.

20. IIS 7.0 Programming New managed code API  Access and control the server configuration  Manage top-level server objects  Access certificate and registration information  Access state information at runtime  Access configuration settings at runtime

21. Locking Configuration Settings You can allow non administrators to:  Modify configuration properties  Override configuration properties overrideMode: Defines the lockdown state of a configuration section

22. Default Locking of Sections Defined in  Use overrideModeDefault............

23. Locking Sections

24. Granular Locking Unlocking a section allows any part of it to be changed by application or site owners With granular locking you can restrict changes to specific elements or attribute settings You can also restrict the type of change to add, remove, or modify

25. lockAttributes & lockAllAtributesExcept Specifies attributes that are locked <defaultDocument enabled="true" lockAttributes="enabled"> <defaultDocument enabled="true" lockAttributes="enabled"> Locked

26. lockElements Specifies elements that are locked <defaultDocument enabled="true" lockElements="files"> <defaultDocument enabled="true" lockElements="files"> Locked

27. lockElements add remove clear Limits what can be done to an element <defaultDocument enabled="true" <defaultDocument enabled="true" Elements cannot be added

28. lockItem Locks a single item Locked

29. Locking Summary lockAttributes lockAllAttributesExcept lockElements lockAllElementsExcept lockItem

30. IIS Manager and Delegation Control feature delegation  Configuration section locking  Permit users to use IIS manager  IIS Manager features can be hidden from view Manage site and application administrators Manage IIS Manager users