Microsoft Windows 2000 and IIS 5.0 Administrator's Pocket Consultant (Pro-Administration)

398 Pages·2001·4.31 MB·English

by  William R. Stanek

PUBLISHED BY
Microsoft Press
A Division of Microsoft Corporation
One Microsoft Way
Redmond, Washington 98052-6399
Copyright © 2001 by William R. Stanek
All rights reserved. No part of the contents of this book may be reproduced or transmitted in any
form or by any means without the written permission of the publisher.
Library of Congress Cataloging-in-Publication Data
Stanek, William R.
Microsoft Windows 2000 and IIS 5.0 Administrator's Pocket Consultant / William R. Stanek.
p. cm.
Includes index.
ISBN 0-7356-1024-X
1. Microsoft Windows (Computer file) 2. Web sites. 3. Computer network resources. I.
Title.
QA76.76.O63 S73448 2001
005.7'13769-dc21 2001018330
Printed and bound in the United States of America.
4 5 6 7 8 9 QWE 7 6 5 4 3 2
Distributed in Canada by H.B. Fenn and Company Ltd.
A CIP catalogue record for this book is available from the British Library.
Microsoft Press books are available through booksellers and distributors worldwide. For further
information about international editions, contact your local Microsoft Corporation office or contact
Microsoft Press International directly at fax [phone]. Visit our Web site at Visit our Web site at
www.microsoft.com/mspress. Send comments to [email protected].
Active Directory, BackOffice, FrontPage, JScript, Microsoft, Microsoft Press, MS-DOS, Visual Basic,
Visual FoxPro, Windows, and Windows NT are either registered trademarks or trademarks of Microsoft
Corporation in the United States and/or other countries. Other product and company names mentioned
herein may be the trademarks of their respective owners.
Unless otherwise noted, the example companies, organizations, products, people, and events depicted
herein are fictitious. No association with any real company, organization, product, person, or event is
intended or should be inferred.
Acquisitions Editor: Juliana Aldous
Project Editor: Karen Szall
Part No. X08-04128
Contents at a Glance
Part I
Microsoft Windows 2000 Web Administration
Fundamentals
1 Overview of Microsoft Web Services 3
2 Core IIS Administration 17
Part II
Web Server Administration
3 Configuring Web Sites and Servers 41
4 Customizing Internet Information Services 71
5 Managing Web Server Security 111
6 Managing Microsoft Certificate Services and SSL 149
Part III
Essential Services Administration
7 Managing FTP Servers 189
8 Configuring and Maintaining SMTP 215
9 Administering the Indexing Service 251
Part IV
Performance, Optimization, and Maintenance
10 Performance Tuning and Monitoring 277
11 Tracking User Access and Logging 309
12 IIS Optimization and the Metabase 333
This page intentionally left blank
Table of Contents
Acknowledgments xvii
Introduction xix
Part I
Microsoft Windows 2000 Web Administration
Fundamentals
1 Overview of Microsoft Web Services 3
Choosing Hardware 4
Using IIS 6
Installing IIS Components and Default Sites 6
Understanding Authentication Enhancements 8
Installing Internet Services and Service-Related Accounts 8
Web Administration Tools and Techniques 9
Managing Resources with Key Administration Tools 9
Installing Administration Tools 10
Web Administration Techniques 11
2 Core IIS Administration 17
Working with IIS and URLs 17
Understanding the IIS Architecture 17
Understanding URLs 19
Internet Information Services Snap-In Essentials 22
Starting and Using the Internet Information
Services Snap-In 22
Connecting To Other Servers 24
Starting, Stopping, and Restarting All Internet Services 25
Starting, Stopping, and Pausing Individual Resources 27
Rebooting IIS Servers 28
Managing IIS Services 29
Core IIS Services 30
Starting, Stopping, and Pausing IIS Services 30
Configuring Service Startup 31
vi | Table of Contents
Configuring Service Recovery 32
Configuring IIS Backup and Recovery 33
Storing a Server’s Configuration 33
Creating IIS Configuration Backups 35
Restoring IIS from Backup Configurations 36
Rebuilding Corrupted IIS Installations 36
Deleting Backup Configurations 37
Part II
Web Server Administration
3 Configuring Web Sites and Servers 41
Web Site Naming and Identification 41
Understanding IP Addresses and Name Resolution 41
Understanding Web Site Identifiers 43
Hosting Multiple Sites on a Single Server 43
Checking the Computer Name and IP Address of Servers 46
Managing Master Web Service Properties 48
Creating Web Sites 48
Managing Web Site Properties 52
Configuring a Site’s Home Directory 52
Configuring Ports, IP Addresses, and Host Names
Used by Web Sites 53
Configuring Multiple Identities for a Single Web Site 55
Restricting Incoming Connections and
Setting Time-Out Values 56
Configuring HTTP Keep-Alives 57
Managing Directories 58
Understanding Physical and Virtual Directory Structures 58
Creating Physical Directories 59
Creating Virtual Directories 59
Linking IISAdmin, IISHelp, and Other System Directories 60
Modifying Directory Properties 61
Renaming Directories 61
Deleting Directories 62
Table of Contents | vii
Managing Web Content 62
Opening and Browsing Files 62
Modifying the IIS Properties of Files 62
Renaming Files 63
Deleting Files 63
Redirecting Browser Requests 63
Redirecting Requests to Other Directories or Web Sites 64
Redirecting All Requests to Another Web Site 65
Retrieving Files from a Network Share 65
Redirecting Requests to Applications 66
Customizing Browser Redirection 67
4 Customizing Internet Information Services 71
Essentials for Working with IIS Applications 71
Understanding ISAPI Applications 72
Understanding ASP Applications 74
Defining Custom Applications 75
Using and Running Applications 77
Managing Custom IIS Applications 80
Creating Pooled and Nonpooled Applications 80
Configuring Application Mappings and Caching 82
Managing Session State 85
Controlling Application Buffering 87
Setting Parent Paths, Default ASP Language, and
ASP Script Time-Out 88
Enabling and Disabling Application Debugging 89
Configuring Application Error Messages 89
Unloading Isolated Applications 89
Deleting IIS Applications 90
Managing Custom ISAPI Filters 90
Viewing and Configuring Global Filters 90
Viewing and Configuring Local Filters 91
Customizing Web Site Content and HTTP Headers 92
Configuring Default Documents 92
viii | Table of Contents
Configuring Document Footers 93
Using Content Expiration and Preventing
Browser Caching 94
Using Custom HTTP Headers 95
Using Content Ratings 96
Customizing Web Server Error Messages 98
Understanding Status Codes and Error Messages 98
Managing Custom Error Settings 100
Using MIME and Configuring Custom File Types 103
Understanding MIME 103
Viewing and Configuring MIME Types for
All Web Sites on a Server 105
Viewing and Configuring MIME Types for
Individual Sites and Directories 106
Additional Customization Tips 106
Using Update Sites to Manage Outages 107
Using Jump Pages for Advertising 108
Handling 404 Errors and Preventing Dead Ends 109
5 Managing Web Server Security 111
Managing Windows Security 111
Working with User and Group Accounts 112
IIS User and Group Essentials 112
Working with File and Folder Permissions 116
Working with Group Policies 121
Managing IIS Security 127
Setting Web Server Permissions 127
Configuring Distributed Authoring and Versioning 132
Setting Authentication Modes 133
Configuring IP Address and Domain Name Restrictions 137
Configuring Web Site Operators 140
More Tips for Enhancing Web Server Security 142
Using Firewalls 142
Renaming the Administrator Account 142
Disabling the Default Web Site 142
Table of Contents | ix
Disabling Remote Administration from the Web 143
Disabling Directory Browsing 143
Creating Legal Notices 143
Applying Service Packs, Hot Fixes, and Templates 144
Removing the IISADMPWD Virtual Directory 146
Checking for Malicious Input in Forms and
Query Strings 146
Removing Unused Application Mappings 147
6 Managing Microsoft Certificate Services and SSL 149
Understanding SSL 149
Using SSL Encryption 149
Using SSL Certificates 151
Understanding SSL Encryption Strength 153
Working with Microsoft Certificate Services 154
Understanding Certificate Services 154
Installing Certificate Services 155
Accessing Certificate Services in a Browser 158
Starting and Stopping Certificate Services 159
Backing Up and Restoring the CA 160
Approving and Declining Pending Certificate Requests 163
Generating Certificates Manually in the
Certification Authority Snap-In 163
Revoking Certificates 164
Reviewing and Renewing the Root CA Certificate 165
Creating and Installing Certificates 166
Creating Certificate Requests 167
Submitting Certificate Requests
to Third-Party Authorities 170
Submitting Certificate Requests to Certificate Services 172
Processing Pending Requests and Installing
Site Certificates 174
Deleting Pending Certificate Requests 175
Working with SSL 175