HOWTO: PreCondition an ISAPI Extension DLL

Question: Hello We have a legacy x64 ISAPI extension that runs without problems in Win 2003 64bit – IIS 6.0. But in Win2008 EBS Security Manager setup, IIS 7.0 Default Application Pool’s WOW64 / Enable32BitApp property is enabled by default, and this makes x64 ISAPI extension DLL to fail loading. By setting the Enable32BitApp option…

2

WebDAV, Source, and Read Permissions on IIS

Question:Hello: With the new WebDAV upgrade in IIS 7.0, there is a permission named “Source”. How is the “Source” permission different from “Read” please? What if “Source” is enabled but “Read” is not?? Answer: Source and Read permissions control different behaviors. Read permission controls whether the IIS Static File Handler allows the requested resource to…

1

Managed Modules and ISAPI Filters

Question: Hello, I have an isapi filter and a managed module. I need to put both in the same website and I need that the manage module run before the isapi filter. The sequence are: Module—>ISAPI filter. How can I do this? Answer: The answer really depends on the filter events that the ISAPI Filter…

4

HOWTO: Change IIS User Impersonation Token

Question: Hi, We are using our third party component for doing authentication and authorization with IIS6 web server on win2k3 X64 EE. Here we are using IMPERSONATION concept for this integration. Can anybody describe the required configuration which are needed at IIS 6 for successfully impersonation of users with third party component? Should we need…

2

IIS7 Handlers - accessPolicy and requireAccess

Question: Hello: In IIS 7.0, you can edit a handler mapping in the Handler Mappings applet (like for AspClassic), then click Request Restrictions button, Access tab, and select the “Write” permission.  But even when the “Edit Feature Permission” in that site/folder is set to Read+Script+Execute, the handler with the “Write” permission is still disabled! Why?…

4

HOWTO: List all Virtual Directories and Paths of a List of Servers

Question: I need to audit web servers in my domain, and would like to be able to connect to each server, and enumerate the virtual directories — ultimately leading to a link to each web site hosted by the server. Can this code be modified to get that information? Thanks. Answer: Yes, you can modify…

12

HOWTO: Create Custom Application Pool from Commandline

Question Hi, I have a Web site configured to run in a custom application pool. The pool identify is set to a domain user. I can change the users password using IIS Manager, but is there a command line method ? Thanks Answer You can use the ADSUTIL.VBS tool to do this from the commandline…

13

Internet Explorer is not an HTTP Validator

Question: I tried a 2nd approach in porting client code from WinInet, and that was to utilize managed C++, as opposed to WinHttp. After implementing the .NET managed client code…    HttpWebRequest^ myReq = dynamic_cast<HttpWebRequest^>(WebRequest::Create( strTargetURL ));    myReq->Method = “POST”;    …     HttpWebResponse^ HttpWResp = dynamic_cast<HttpWebResponse^>(myReq->GetResponse()); Within the code, GetResponse() throws…     An unhandled exception of…

7

HOWTO: Basic Native/Managed Code Interop

IIS7 core extensibility model supports both native and managed code as first-class citizens. So, I feel it is time for a little refresher on managed/native code interop… starting with the more popular route of how to wrap native code API for use within managed code. I am using the newer syntax introduced with .Net Framework…

1