IIS 6.0 Content Revision Summary

This topic summarizes the changes made to the content in the IIS 6.0 Deployment Guide, the IIS 6.0 Operations Guide, and the IIS 6.0 Technical Reference since the original release of the documentation.

The table below gives a description of the area that each change affects.

AreaDescription

Application Configuration

Provides information about changes made to IIS 6.0 content about configuring applications.

Architecture

Provides information about changes made to IIS 6.0 content about IIS architecture.

Error Messages

Provides information about changes made to IIS 6.0 content about error messages.

Installation

Provides information about changes made to IIS 6.0 content about installation of IIS.

Introduction/Overview

Provides information about changes made to introductory content about IIS 6.0.

Logging

Provides information about changes made to IIS 6.0 content about logging.

Performance

Provides information about changes made to IIS 6.0 content about performance and scalability.

Reference

Provides information about changes made to IIS 6.0 reference content, such as metabase properties, registry entries, etc.

Security

Provides information about changes made to IIS 6.0 content about security.

Server Administration

Provides information about changes made to IIS 6.0 content about administering an IIS server.

Site Administration

Provides information about changes made to IIS 6.0 content about Web sites, Web directories, File Transfer Protocol (FTP) sites, Network News Transfer Protocol (NNTP) sites, and Simple Mail Transfer Protocol (SMTP) sites.

Troubleshooting

Provides information about changes made to IIS 6.0 troubleshooting content.

Web Applications

Provides information about changes made to IIS 6.0 content about Web applications.

Application Configuration

Content TypeTopicDescription

IIS 6.0 Deployment Guide

Appendix D: Running 32-bit Applications on 64-bit Windows

Added new appendix with information about using the WOW64 emulator to run 32-bit Web applications on 64-bit Windows.

IIS 6.0 Operations Guide

Configuring IIS to Run 32-bit Applications on 64-bit Windows and subordinate topics

Added new topic about configuring IIS to run 32-bit Web applications on 64-bit Windows.

IIS 6.0 Operations Guide

Configuring the Maximum Number of Concurrent CGI Requests

Added topic with information about configuring the maximum number of Common Gateway Interface (CGI) requests allowed to run at one time by setting the MaxConcurrentCgisExecuting registry key.

IIS 6.0 Operations Guide

Configuring CGI Application Timeouts

Added topic with information about configuring CGI application time-out values.

IIS 6.0 Operations Guide

Configuring ASP.NET Applications in Worker Process Isolation Mode

Updated which processModel settings still apply in worker process isolation mode.

IIS 6.0 Operations Guide

Configuring Applications to Use COM+ Services

Clarified that some configurations of launch permissions may prohibit COM+ objects from being created, which may affect the running of the app/extension/etc. in which the object resides.

IIS 6.0 Operations Guide

Configuring Applications to Use COM+ Services

Corrected list of Windows Components that support Side-by-Side assemblies.

IIS 6.0 Operations Guide

Configuring Applications to Use COM+ Services

Added note that batch Logon is required for COM+ server-activated application identities.

IIS 6.0 Operations Guide

Installing ISAPI Filters

Added notes for the following issues:

In IIS 6.0, an Internet Server API (ISAPI) filter added at the site level will not load until the Web server has served at least one request to that site, so the filter's status won't display anything until that time.

At the Web site level, you will not see any global filters inherited from the Web server's master properties.

IIS 6.0 Operations Guide

Recycling Worker Processes with IIS 6.0 and subordinate topics

Added information about worker process recycling including how it works, when to use it, how to configure it, and logging the recycling events.

Architecture

Content TypeTopicDescription

IIS 6.0 Technical Reference

Evaluating Application Isolation Modes

Added information about how SF_NOTIFY_READ_RAW_DATA notifications work depending on the application mode in which the server is running.

IIS 6.0 Technical Reference

HTTP Protocol Stack

Added a note about improvements made to HTTP.sys for Windows Server 2003 SP1 and a link to the HTTP API in Windows Server 2003 SP1 white paper.

Error Messages

Content TypeTopicDescription

IIS 6.0 Operations Guide

Configuring Custom Error Messages

Added note that the following errors are not customizable: 400, 403.9, 411, 414, 500, 500.11, 500.14, 500.15, 501, 503, 505.

IIS 6.0 Operations Guide

Error Messages in IIS 6.0

Added note that HTTP.sys does not serve custom errors, so standard HTTP 1.1 error messages will be returned to the browser if a request does not reach user mode.

Installation

Content TypeTopicDescription

IIS 6.0 Operations Guide

Installing IIS

Added link to information about answer files and unattended setup parameters in the IIS 6.0 Technical Reference.

IIS 6.0 Technical Reference

Creating an Answer File

Documented the following unattended setup parameters:

InetPrint

SvcManualStart

ExtensionFile

Introduction/Overview

Content TypeTopicDescription

IIS 6.0 Deployment Guide

IIS 6.0 Benefits and Features

Added information about HTTP compression.

IIS 6.0 Deployment Guide

Choosing a Cluster Technology for IIS 6.0 and subordinate topics

Added topics with information about the different clustering technologies available for IIS 6.0, and included links for additional information.

IIS 6.0 Operations Guide

What's Changed

Clarified the meaning of "extension" in the context of the Known Extensions feature of IIS 6.0, and added information about how to lock down DLLs, executables, and file name extensions.

IIS 6.0 Operations Guide

What's Changed

Does ASP debugging work in IIS 6.0 worker process isolation mode?

Important Changes in ASP

Added information about configuring Launch and Access permissions to enable ASP debugging for Script Debugger and Visual InterDev when using IIS 6.0 Worker Process Isolation mode.

Logging

Content TypeTopicDescription

IIS 6.0 Operations Guide

Enabling W3C Centralized Logging

Added topic describing how to enable W3C centralized logging.

IIS 6.0 Operations Guide

Auditing the Metabase

Added new topic with information about auditing in the IIS metabase.

IIS 6.0 Operations Guide

Auditing in IIS 6.0

Added link to information about disabling auditing of successful logons in the security event log.

IIS 6.0 Technical Reference

W3C Centralized Logging

Added topic about the new W3C centralized logging feature.

IIS 6.0 Technical Reference

Metabase Auditing

Added new topic with information about auditing in the IIS metabase.

Performance and Scalability

Content TypeTopicDescription

IIS 6.0 Deployment Guide

Enabling HTTP Compression in IIS 6.0

Configure Compression

Added topics with information about HTTP compression.

IIS 6.0 Operations Guide

Using HTTP Compression

Enabling HTTP Compression

Customizing the File Types IIS Compresses

Added topics with information about HTTP compression.

IIS 6.0 Operations Guide

Throttling Bandwidth

Clarified that the value in the Maximum bandwidth (in kilobytes per second) box must be at least 1024 Kbps.

IIS 6.0 Technical Reference

Events and Conditions That Disable HTTP.sys Response Caching

Added information about uncached responses when accessing a Web site by requesting the root folder with no specific file, and about Web sites with IP Restriction lists.

IIS 6.0 Technical Reference

Using HTTP Compression for Faster Downloads

Added information about configuring HTTP compression for individual sites and site elements.

Reference

Content TypeTopicDescription

IIS 6.0 Operations Guide

NTAuthenticationProviders Metabase Property

Added information about the state of the Integrated Windows Authentication setting following installation of Windows Server 2003 Service Pack 1 (SP1) as part of a slipstream installation of a Windows Server 2003 operating system.

IIS 6.0 Operations Guide

MD_ETAG_CHANGENUMBER Metabase Property

Added information about setting this property in an environment with clustered Web servers.

IIS 6.0 Operations Guide

AppPoolQueueLength Metabase Property

Added note that the default value of this property changed with Windows Server 2003 Service Pack 1 (SP1) from 4000 to 1000, with a recommendation to lower the value if IIS is already installed on the server prior to applying the service pack.

IIS 6.0 Operations Guide

FTP Service Events

Added new FTP Service event message 14401: "The server failed to create a data channel connection to a client on local interface ip_address. The FTP data port port_number may be in use by another service or application."

IIS 6.0 Operations Guide

ConnectionTimeout Metabase Property

Added information about the reasons a connection can be considered inactive and disconnected by IIS.

IIS 6.0 Operations Guide

LogEventOnRecycle Metabase Property

Clarified that the flags for this property only determine whether or not IIS will log the type of recycle event in the flag.

IIS 6.0 Operations Guide

AspSxsName Metabase Property

AspAppServiceFlags Metabase Property

Corrected list of Windows Components that support Side-by-Side assemblies.

IIS 6.0 Operations Guide

ASP Registry Entries

Created the topic ASP Registry Entries and documented the following ASP registry keys:

AspMaxPropertyStringLength

AspMaxResponseHeaderLength

DisableCachedResponseOnUNCAccessFailure

DisableComPlusCpuMetric

DisableOOMRecycle

EnableChangeNotificationForUNC

F5AttackDetectionEnabled

FileMonitoringEnabled

FileMonitoringTimeoutSeconds

HangDetConsecIllStatesThreshold

HangDetEnabled

HangDetRequestThreshold

HangDetThreadHungThreshold

MaxCPU

MaxCSR

ThreadMax

IIS 6.0 Operations Guide

MaxProcesses Metabase Property

Removed erroneous information about setting the value of this property to zero in order to create an unmanaged application pool.

IIS 6.0 Operations Guide

FTP Service Registry Entries

Documented the following FTP service registry keys:

AnonymousHomeDirInfoGrace

AnonymousHomeDirInfoInterval

CacheAnonymousHomeDirInfo

IIS 6.0 Operations Guide

Global Registry Entries

Documented the following global registry keys:

DataSetCacheSize

DoDirMonitoringForUNC

ErrorLoggingDir

FileAttributeCheckThreshold

ThreadPooldMaxCPU

ThreadPoolStartDelay

ThreadPoolStartupThreadCount

ThreadPoolMaxContextSwitch

ThreadPoolRefTraceCounter

ThreadPoolExactThreadCount

IIS 6.0 Operations Guide

WWW Service Registry Entries

Documented the following World Wide Web Publishing Service (WWW Service) registry keys:

EnableTraceMethod

LogErrorRequests

MaxConcurrentCgisExecuting

UseSharedWPDesktop

IIS 6.0 Operations Guide

DisableSocketPooling Metabase Property

Clarified that setting this metabase property has no effect in IIS 6.0, and included link to information about how to use the new utility, Httpcfg.exe, to allow applications to use the same port on different IP addresses.

IIS 6.0 Operations Guide

ServerListenTimeout Metabase Property

ConnectionTimeout Metabase Property

HeaderWaitTimeout Metabase Property

MinFileBytesPerSec Metabase Property

Clarified that ServerListenTimeout metabase property is not used by the WWW service, but is used by the FTP, SMTP, and NNTP services.

Added information about using the ConnectionTimeout, HeaderWaitTimeout, and MinFileBytesPerSec metabase properties instead of ServerListenTimeout for Web service nodes.

IIS 6.0 Operations Guide

SMPProcessorAffinityMask Metabase Property

Added note to warn that setting the SMPProcessorAffinityMask property to zero can create an error condition.

IIS 6.0 Operations Guide

Metabase Property Reference

Documented the following metabase properties:

ServerID

LogInUTF8

IsapiRestrictionList

CgiRestrictionList

RestrictionListCustomDesc

SuppressDefaultFTPBanner

WebDAVMaxAttributesPerElement

IIS 6.0 Operations Guide

Metabase Property Reference

Corrected documentation for the following metabase properties:

DoDynamicCompression

DoStaticCompression

HcDoDynamicCompression

HcDoStaticCompression

IdleTimeout

NotDeletable

PeriodicRestartTime

RevocationURLRetrievalTimeout

RevocationFreshnessTime

IIS 6.0 Operations Guide

NotDeletable Metabase Property

Clarified that the NotDeletable metabase property is invalid in IIS 6.0.

IIS 6.0 Technical Reference

Global Registry Entries

Corrected the following registry key references:

DigestContextCacheTTL

DigestPartialContextCacheTTL

MaxConcurrency

MaxPoolThreads

PoolThreadLimit

ThreadTimeout

Security

Content TypeTopicDescription

IIS 6.0 Deployment Guide

Reviewing Security Policies, Processes, and Procedures

Corrected Table 3.16, "Firewall and Router Security," to refer to port 445 instead of 455 for NetBIOS/SMB.

IIS 6.0 Operations Guide

Using Isolation to Secure Applications

Added topic with information about giving each application pool its own account identity to isolate applications on the Web server.

IIS 6.0 Operations Guide

Configuring Subauthentication and subordinate topics

Corrected references to the AnonymousPasswordSync metabase property.

IIS 6.0 Operations Guide

Encrypting Data When Running WMI–Based Remote Administration Scripts

Added important note that Windows Management Instrumentation (WMI) based scripts must be edited to encrypt authentication credentials and data after upgrading to SP1.

IIS 6.0 Operations Guide

Configuring Constrained Delegation for Kerberos

Added information about Kerberos authentication failing with a 401.3 error if not configured properly.

IIS 6.0 Operations Guide

Integrated Windows Authentication in IIS 6.0

Configuring Integrated Windows Authentication in IIS 6.0

Windows Authentication Provider in ASP.NET

Authentication in ASP.NET

Added information about the state of the Integrated Windows Authentication setting following installation of Windows Server 2003 Service Pack 1 (SP1) as part of a slipstream installation of a Windows Server 2003 operating system.

IIS 6.0 Operations Guide

Securing Sites with IP Address Restrictions

Added note about the disabling of the HTTP.sys cache when IP address restriction is used on a Web site.

IIS 6.0 Operations Guide

Enabling Kernel-Mode SSL

Added new topic about kernel-mode Secure Sockets Layer (SSL).

IIS 6.0 Operations Guide

Basic Authentication in IIS 6.0

Added information about administering users and adding them to groups with specific permissions when using Basic authentication.

IIS 6.0 Operations Guide

Requesting a New Server Certificate Using the Web Server Certificate Wizard

Configuring SSL on a Web Server or Web Site

Clarified the following issues:

The Web Server Certificate Wizard is used to request new server certificates.

The request file generated by the Web Server Certificate Wizard is saved by default as C:\Certreq.txt.

SSL can be configured for a Web server or a Web site.

IIS 6.0 Operations Guide

Installing Server Certificates

Added note that a password must be specified before the certificate can be assigned to a Web server.

IIS 6.0 Operations Guide

Configuring SSL on a Web Server or Web Site

Added note explaining that users will receive an error message when browsing to a site that does not have SSL completely setup and the Require Secure Channel (SSL) check box is selected for the site.

IIS 6.0 Operations Guide

IIS 6.0 Security Best Practices

Added recommendation to use an encrypted remote connection with WMI-based administration scripts.

IIS 6.0 Operations Guide

Mapping Client Certificates with Directory Service Mapping

Added procedure for enabling directory sService mapping.

IIS 6.0 Operations Guide

Establishing an Encrypted Remote Connection

Added topic about establishing an encrypted connection when running WMI-based administration scripts on an IIS server over a remote connection.

IIS 6.0 Operations Guide

Configuring Subauthentication and subordinate topics

Corrected references to AnonymousPasswordSync metabase property and added IIsWebService node as recommended configurable location.

IIS 6.0 Operations Guide

Anonymous Authentication in IIS 6.0

Clarified that the IUSR_Computername account, which is a member of the Guests group on computers running IIS, has the same access as members of the Users group by default.

IIS 6.0 Operations Guide

Configuring SSL on a Web Server or Web Site

Added note that users will receive an error when browsing to a Web site that requires SSL if the process of setting up SSL is not complete.

IIS 6.0 Operations Guide

Enabling and Disabling Dynamic Content in IIS 6.0

Added reminder to disable Web service extensions when features are no longer required.

IIS 6.0 Operations Guide

Enabling Web Service Extensions

Enabling and Disabling Dynamic Content in IIS 6.0

Added important note that allowing unknown ISAPI extensions or CGI extensions to run on a Web server can leave the server susceptible to attack.

IIS 6.0 Operations Guide

Configuring Subauthentication on a New Installation of IIS 6.0

Configuring Subauthentication in IIS 5.0 Isolation Mode

Added node at which the AnonymousPasswordSync metabase property should be set.

IIS 6.0 Operations Guide

Creating an Authorization Policy Store in Authorization Manager

Setting the Scope for the Application

Clarified items in the procedure that must be typed exactly as shown in order for the authorization policy store for IIS 6.0 URL Authorization to be configured successfully.

IIS 6.0 Operations Guide

Setting Metabase Properties for URL Authorization

Removed semi-colons from sample script.

IIS 6.0 Operations Guide

Adding Urlauth.dll as a New Web Service Extension

Added procedure for adding Urlauth.dll as a new Web service extension.

IIS 6.0 Operations Guide

Adding the IIS Worker Process to the Readers Role

Added procedure for adding the IIS worker process to the Reader role.

IIS 6.0 Operations Guide

Exporting a Client Certificate for One-to-One Mapping

Added note that client certificate mapping programs for IIS 6.0 and Windows Active directory services accept certificates formatted as either binary or Base-64 encoded.

IIS 6.0 Operations Guide

Setting NTFS Permissions for Directories or Files and subordinate topics

Clarified that IIS Manager is used to set permissions on Web sites, directories, and virtual directories, and that to set permissions for individual files you must use a programmatic solution, such as Adsutil.vbs.

IIS 6.0 Operations Guide

Advanced Digest Authentication in IIS 6.0

Digest Authentication in IIS 6.0

UseDigestSSP Metabase Property

Added note that the WWW service must be restarted for a change in the UseDigestSSP metabase property to take effect.

IIS 6.0 Operations Guide

Configuring SSL Host Headers

 

Obtaining and Installing a Wildcard Server Certificate

 

Configuring Server Bindings for SSL Host Headers

 

Advanced Digest Authentication

Added new topics that explain how to obtain and install a wildcard server certificate that can be used for Web sites that have the same IP address:port binding, as well as how to use Adsutil.vbs to configure SSL host headers and how to ensure that secure content is not served for an HTTP request.

IIS 6.0 Technical Reference

Advanced Digest Authentication

Added information about configuring the registry keys DigestPartialContextCacheTTL and DigestContextCacheTTL.

IIS 6.0 Technical Reference

.NET Passport Authentication

Added information about configuring Web sites to conform to .NET Passport privacy guidelines.

IIS 6.0 Technical Reference

Digest Authentication

Added information about the issue where logging on with a user principal name (UPN) in the form username@domain.top-leveldomain fails.

IIS 6.0 Technical Reference

Integrated Windows Authentication

Added information about the state of the Integrated Windows Authentication setting following installation of Windows Server 2003 Service Pack 1 (SP1) as part of a slipstream installation of a Windows Server 2003 operating system.

IIS 6.0 Technical Reference

Authentication Methods Supported in IIS 6.0

Added information about the importance of using authentication with IIS when resources on the Web server need to be restricted to approved users, and clarified that IIS goes in order from the most secure to the least secure authentication method when multiple authentication methods are configured.

IIS 6.0 Technical Reference

Integrated Windows Authentication

Added information that a user logged on to the local computer as a domain user will not be prompted to authenticate if they access a network computer in that same domain.

IIS 6.0 Technical Reference

Controlling Access to a Database on a Web Server

Added topic with information about controlling access to databases from Web applications.

IIS 6.0 Technical Reference

Access Control Lists

Added three tables outlining the default Access Control Lists (ACLs) and privileges for the IIS_WPG group.

IIS 6.0 Technical Reference

Kernel-Mode SSL

Added topic about running SSL in kernel mode instead of user mode (the default) in Windows 2003 Server SP1.

IIS 6.0 Technical Reference

Configuring Application Pool Identity in IIS 6.0

Added section about the IIS_WPG group.

IIS 6.0 Technical Reference

SSL and SF_NOTIFY_READ_RAW_DATA Filters

Added information about how SF_NOTIFY_READ_RAW_DATA works with SSL when running worker process isolation mode.

IIS 6.0 Technical Reference

Using URL Authorization

Removed semi-colons from sample script.

IIS 6.0 Technical Reference

Digest Authentication

Advanced Digest Authentication

Added note that the WWW service must be restarted for a change in the UseDigestSSP metabase property to take effect.

Server Administration

Content TypeTopicDescription

IIS 6.0 Operations Guide

Configuring Launch Permissions for COM+ Server Objects

Added important note about the IUSR_computername and IWAM_computername accounts no longer being granted launch permissions to COM+ objects by default after installations of IIS on Windows Server 2003 SP1.

IIS 6.0 Operations Guide

Implementing Incremental Web Site Numbering

Added new topic with information about incremental Web site numbering.

IIS 6.0 Operations Guide

Renaming a Web Service Extension

Added topic with information about renaming Web Service extensions.

IIS 6.0 Operations Guide

Administering Servers Remotely in IIS 6.0

Mde references to the Remote Administration (HTTP) Tool consistent.

IIS 6.0 Operations Guide

Uninstalling IIS

Added topic with procedure on uninstalling IIS.

IIS 6.0 Operations Guide

Configuring Application Pool Identity with IIS 6.0

Added JScript code example to show how to programmatically change the account under which an application pool runs.

IIS 6.0 Operations Guide

Setting Active Directory User Isolation Using Iisftp.vbs

Changed references to the following parameters:From FTPDir|FTPRoot to msIIS-FTPDir|msIIS-FTPRoot.

IIS 6.0 Operations Guide

Reliability Features

Configuring Web Gardens with IIS 6.0

Clarified information about how web gardens benefit reliability and performance.

IIS 6.0 Operations Guide

Listing IIS Backup Configurations Using Iisback.vbs

Added note that iisback /list uses Coordinated Universal Time (UTC) for date and time stamps.

IIS 6.0 Operations Guide

Enabling ASP.NET

Added note to clarify the difference between using the Configure Your Server wizard or Add or Remove Programs to install IIS 6.0 and enable ASP.NET.

IIS 6.0 Operations Guide

Configuring Application Pool Identity with IIS 6.0

Added the following procedures:

To change the account under which an application pool runs using the Adsutil.vbs administration script

To programmatically change the account under which an application pool runs

IIS 6.0 Operations Guide

Enabling and Disabling Dynamic Content in IIS 6.0

Added information about needing to enable FrontPage Server Extensions and ASP in order for Visual Studio .NET 2003 applications to work on IIS 6.0.

IIS 6.0 Operations Guide

Setting Up Virtual Servers for Clustering

Corrected the procedure step explaining how to copy IIS configuration from one node to other nodes in a server cluster.

IIS 6.0 Technical Reference

Configuring Rapid-Fail Protection

Updated information about Rapid-Fail Protection.