Implementing, Securing, and Supporting Implementing, Securing, and Supporting IIS 7.xIIS 7.xDon JonesDon JonesConcentratedTech.com

Pre-requisites for this presentation:

1) Familiarity with Windows administration 2) Very basic understanding of Web site administration

Level: Intermediate

This slide deck was used in one of our many conference presentations. We hope you enjoy it, and invite you to use it

within your own organization however you like.

For more information on our company, including information on private classes and upcoming conference appearances, please

visit our Web site, www.ConcentratedTech.com.

For links to newly-posted decks, follow us on Twitter:@concentrateddon or @concentratdgreg

This work is copyright ©Concentrated Technology, LLC

About the InstructorAbout the Instructor

Don Jones Contributing Editor,

technetmagazine.com IT author, consultant, and speaker Co-founder of Concentrated Technology Seven-time recipient of Microsoft’s Most

Valuable Professional (MVP) Award Author and Editor-in-Chief for Realtime

Publishers Trainer for www.CBTNuggets.com

About this SessionAbout this Session

Primarily demo – not slides We’ll start with some key IIS functional

concepts, and move right into the “how-to”

Bring your questions – this is the time to ask them! Don’t save ‘em for the end.

How IIS WorksHow IIS Works

Kernel Mode

User Mode

Application PoolApplication Pool Application PoolApplication Pool

W3wp.exe

W3wp.exe

W3wp.exe

W3wp.exe

W3wp.exe

W3wp.exe

http.syshttp.sys

Modular ArchtiectureModular Archtiecture

Nearly every bit of IIS’ functionality is modularized

You can install/uninstall modules (“features”) as needed

Each module is a potential attack point; only install the ones you need

Each module typically offers its own configuration; restart the IIS console after adding/removing a module

Web Platform InstallerWeb Platform Installer

The Web PI is the official way to add functionality to IIS– Official Microsoft extensions– Third-party extensions (like PHP)– Web applications (like WordPress)

Typically does all of the configuration necessary to make an extension work – saves lots of time!

Web PI installs (2MB download) on the IIS server; get it from www.iis.net.

Hands-On TimeHands-On Time

Let’s take a look at the major configuration options within IIS…

…including how to set up Web and FTP sites

We will be using IIS 7.5 (Win2008R2) but 7.0 is substantially similar (some built-in 7.5 features are add-ons for 7.0)

We can also look at the 7.5 PowerShell cmdlets and PSDrive provider

Start your camcorders now…

Thank You!Thank You!

Please feel free to pick up a card if you’d like copies of my session materials

I’ll be happy to take any last questions while I pack up

Please complete and submit an evaluation form for this and every session you attend!

This slide deck was used in one of our many conference presentations. We hope you enjoy it, and invite you to use it

within your own organization however you like.

For more information on our company, including information on private classes and upcoming conference appearances, please

visit our Web site, www.ConcentratedTech.com.

For links to newly-posted decks, follow us on Twitter:@concentrateddon or @concentratdgreg

This work is copyright ©Concentrated Technology, LLC