So i am following these steps here to install IIS on Windows 10 Pro.

Only thing is it has been 2~ hours and it is still "Searching for required files". I am on an ADSL connection so understand it might be slow if downloading some stuff but it is literally the same message and loading bar for hours. 

Hi all, we recently migrated an iis site from iis v6.1 to iis v10 on Server 2016. We have copied all the configuration across, but are encountering an issue accessing the website using IE and Windows Authentication, it works fine on Chrome after entering our login credentials. We only have Windows Authentication enabled in iis settings and have tried switching the provider order for NTLM and Negotiate. integrated windows authentication is checked on the client trying to access the site using IE. I've compared NTFS permissions with the old server, which works still and can't see any difference. the bindings are all the same. 

When we type in the URL in IE we get the following error "401 - Unauthorized: Access is denied due to invalid credentials.

You do not have permission to view this directory or page using the credentials that you supplied."

I've spent ages searching online for solutions and have tried various things, I've checked our web.config and applicationhost config files, tried removing and re-adding Windows Authentication modules. I've set up tracing, which hasn't helped a lot. 

view trace
Warning -MODULE_SET_RESPONSE_ERROR_STATUS

ModuleNameIIS Web Core

NotificationAUTHENTICATE_REQUEST

HttpStatus401

HttpReasonUnauthorized

HttpSubStatus2

ErrorCodeAccess is denied.(0x80070005)

Can anyone offer any advice? I'm really struggling now, Below is a copy of how our application host config is configured for security

<location path="Site">
<system.webServer>
<security>
<authentication>
<anonymousAuthentication enabled="false" userName="" />
<windowsAuthentication enabled="true" useKernelMode="true">
<providers>
<clear />
<add value="NTLM" />
<add value="Negotiate" />
</providers>
<extendedProtection tokenChecking="None" />
</windowsAuthentication>
<basicAuthentication enabled="false" />
</authentication>
</security>
</system.webServer>
</location>
<location path="" overrideMode="Deny">
<system.webServer>
<security>
<authentication>

<windowsAuthentication enabled="true" authPersistNonNTLM="true" useKernelMode="true">
<providers>
<clear />
<add value="NTLM" />
</providers>
<extendedProtection tokenChecking="None" />
</windowsAuthentication>
</authentication>
</security>
</system.webServer>
</location>

</configuration>

I am trying to setup IIS to host a website and ftp server. The website works properly if i use localhost or 127.0.0.1

Windows firewall has an exception to port 80 and 21, however it still doesnt work even if i turn off windows firewall

Port forwarding is enabled on my router/cable modem

from my public ip address

from another pc from my network

idk what else could be causing this or what i can show to troubleshoot it.

Please any help would be amazing.

Hello All! 

A have a problem with IP and domain restriction in Windows Server 2016. 

I need access to my server to be restricted, so I use "IP and domain restriction". I have about 10 domains. 3 of them work through Cloudflare WAF. I added all cloudflare ip and remaining 7 domains to "whitelist". At the end I added a rule to deny access in this form: 0.0.0.0 (255.255.255.255). The problem is that everything that comes to my server with IP works correctly, and everything through DNS-Forbidden: access deny. Server work in AWS EC2.

Have you encountered this? How to solve the problem? Thanks in advance for your help.

P.S. Also with Linux, I added an entry in the hosts, according to which access to the site (which works through Cloudflare) will go directly, bypassing Cloudflare, directly to the server.  As expected, I got the error "Forbidden-access denied". This means that the permission and prohibition rules in IIS work correctly for IP.

Windows 10 Home Edition

After a clean installation we try to add feature IIS. We get error   0x800F0922.

sfc /scannow did not find any integrity violations

Dism /Online /Cleanup-Image /Restorehealth return no errors

.NetFramework 4.7 Advanced Services is installed

ASP.NET 4.7 is installed

WCF-services TCP-poorten share is installed

if we try to add feature HTTP-activation we also get this error 

In the log file of DISM we see a warning:

  DISM Provider Store: PID=7636 TID=7492 Failed to Load the provider: C:\WINDOWS\system32\Dism\SiloedPackageProvider.dll. - CDISMProviderStore::Internal_GetProvider(hr:0x8007007e)

Anyone a idea?

I have a Citrix Storefront setup that is connected to a sql server cluster. I currently have a setup with a help webpage set up where the application pool identity user has domain admin access. As a part of security restrictions we are looking to have domain admin access removed for this user, but remain as the IIS application pool identity for this help page. Is there any way to do this?

Hello

I'm a bit swamped with NDES now that I configured the service.
I'm trying to see if it works but for some reasons I cannot access the http://ndes/certsrv/mscep_admin

Which is the right Admin that will need access and how I grant it?
My understanding is the DeviceAdmin who will eventually manage all our endpoints will request a password via SCEP.
https://social.technet.microsoft.com/wiki/contents/articles/9063.active-directory-certificate-services-ad-cs-network-device-enrollment-service-ndes.aspx

Does it need permissions on all templates as outlined in the manual or only the advised one? CEP and Offline Enrollment?
Online it's also said you need the users to be member of the Enterprise Admin but cannot see why

Thanks

Hi all

I've problems connecting my client via WebDAV to my Win2k16 server.

C:\Users\Tom>net use * http://cloud.myhost.com /user:www\administrator xxxxxxxxxxx
System Error 59
Unexpected error has occurred.

Wireshark is logging this information:
HTTP/1.1 405 Method Not Allowed
Allow: GET, HEAD, OPTIONS, TRACE, COPY, PROPFIND, DELETE, MOVE, PROPPATCH, MKCOL, LOCK, UNLOCK
Content-Type: text/html
Server: Microsoft-IIS/10.0
Persistent-Auth: true
X-Powered-By: ASP.NET
strict-transport-security: max-age=31536000; includeSubdomains
Date: Tue, 10 Dec 2019 13:04:24 GMT
Content-Length: 1293
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
<title>405 - HTTP verb used to access this page is not allowed.</title>
<style type="text/css">
<!--
body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}
fieldset{padding:0 15px 10px 15px;}
h1{font-size:2.4em;margin:0;color:#FFF;}
h2{font-size:1.7em;margin:0;color:#CC0000;}
h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;}
#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;
background-color:#555555;}
#content{margin:0 0 0 2%;position:relative;}
.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}
-->
</style>
</head>
<body>
<div id="header"><h1>Server Error</h1></div>
<div id="content">
<div class="content-container"><fieldset>
<h2>405 - HTTP verb used to access this page is not allowed.</h2>
<h3>The page you are looking for cannot be displayed because an invalid method (HTTP verb) was used to attempt access.</h3>
</fieldset></div>
</div>
</body>
</html>

In the IIS Logfile on the serverside i get this record:

2019-12-10 13:29:55 W3SVC17 www 1.2.3.4 OPTIONS / - 80 www\administrator 12-34-56-78.dynamic.hispeed.ch HTTP/1.1 Microsoft-WebDAV-MiniRedir/10.0.18363 - - cloud.myhost.com 405 0 0 1646 685 15

I followed this instructions to install WebDAV:
https://docs.microsoft.com/en-us/iis/install/installing-publishing-technologies/installing-and-configuring-webdav-on-iis

Already checked:
- There is no request filtering for some verbs active.
- The only handler at "Handler Mappings" is WebDAV with the allowance to use "All verbs".,
I don't know what else to check.

Does someone having an idea what i'm doing wrong?

Best regards
Tom

I have a Server 2019 VM that I have had up and running for about a month.  It was put into production on Friday.  On Saturday morning I installed a backup agent on the machine and when it rebooted, it came up in recovery mode with a corrupted registry. I ended up using the RegBack copy to get the machine booted, but it had lost all the configuration and app installations I had done since before Friday.  Most everything reinstalled without issue, but the IIS role was showing not installed.

I backed up the inetpub directory and attempted to add the role again through Server Manager.  The installation starts and the progress bar moves twice.  It then crashes with "The request to add or remove features on the specified server failed. Installation of one or more roles, role services or features failed. Error: 0x80004005".

I reviewed the CBS log and the only report of failure appears to be at line 5709, which appears to be the attempt to update IIS-HttpRedirect.  Glad to post the relevant section of that log if there is an attachment option here.

I have an open case with Microsoft on this.  They made a few unsuccessful half-ass attempts, including:

Using Server Manager to install different roles and features.  Other roles/features install fine, just not IIS.

Installing EXEs to make sure it's not the installer engine.  Other EXEs and MSIs install fine

Using Powershell to attempt to install with Install-Windows-Feature.  Gets similar error. 

I got Windows support, who gave up and moved me to IIS support, who gave up and sent me back to Windows support.  Currently have been waiting for a callback for nearly 36 hours. 

At one point, I got the idea of exporting the W3SVC registry tree from a working Server 2019 web server and importing it on the dead machine.  Did not work, so I removed that imported branch.

Since the IIS role and sites I had created were working prior to the crash, I am guessing that the installer is trying to overwrite something it can't get permission to, but I can't figure out what or how to get around this.

Any assistance would be greatly appreciated.

<div class="msgBody">

I disabled remote 8 days ago on windows server 2012r2. IIS started hanging/crashing/not expanding when reconnected. I uninstalled, reinstalled IIS. But i have been getting this error, I think i must have also tampered with IIS_USRS permission. I cannot even bring on the site at all. Started IIS mainly last year, and now it is not working for me at all.

All services running, reset permissions, bindings, basic settings andadmin/password etc. 

Something must be wrong with best available applicationHost.config, but I do not get it

</div>

in chrome 

This site can’t be reached

sitename refused to connect.

Try:

• Checking the connection
• Checking the proxy and the firewall

Hello.

I exported the application pool and websites from one server and imported them into IIS on another server.    When I click on the Site > Application Settings, I am not seeing name/values like I did on the source server. I can add them manually, but wondering if there's a way to add these in bulk.   thanks.

EDIT:  I checked the web.config file and ensured that the values were present under <configuration> <appSettings>.

I want to install my native module only for specific application not globally .

After searching i found that i can do this

1- install module globally but don't enable it 

C:\Windows\system32>%windir%\system32\inetsrv\appcmd.exe install module /name:myModule /image:"dll_path" /add:false

2- Add it for some specific application . 

C:\Windows\system32>%windir%\system32\inetsrv\appcmd.exe add module /name:myModule /app.name:"RandomSite/"

After running 2nd command i got this error 

ERROR ( message:New MODULE object missing required attributes. This configuration section cannot be used at this path. This happens when the section is locked at a parent level. Locking is either by default (overrideModeDefault="Deny"), or set explicitly by a location tag with overrideMode="Deny" or the legacy allowOverride="false".

I tried adding  that module manually in iis manger for that application which worked . and i found there is entry in ApplicationHost,config like this .

<location path="RandomSite">
<system.webServer>
<modules>
<add name="myModule" />
</modules>
</system.webServer>
</location>

I want to know how to add module entry in ApplicationHost.config by location path as mention abow from command line .

I have IIS SMTP setup on a Server 2019 installation.  The system is running a website, which among other things, sends out email confirmations.

When a confirmation is sent from orders@mydomain.com tosomeone@otherdomain.com and BCC'ed tomyself@mydomain.com and anotherperson@someotherdomain.com, the email is received by the recipient (soneone@otherdomain.com) and the other BCC (anotherperson@someotherdomain.com).  But, the myself@mydomain.com isn't receiving a copy of the email.

I've ran into this issue before on another installation (Server 2012) where when the BCC address and the sender's address are the same domain, the email wasn't be received.  I resolved the issue then by using a different domain in the from address.  In this case, I don't have another domain I can use.

Yes, I've checked the typing of the email addresses, they are correct.  And I've checked the junk/spam folders.  No, the emails aren't ending up in the junk/spam folders.

Does anyone have a clue as to what the problem may be and/or how to resolve the issue?

I having trouble with my IIS.  I configured the server and at first my website all resolved. But on 3 particular website , I stated a Wordpress isntallation. I changed my mind and remove the content of the WordPress isntallation from the Website folder  and reinserted a simple default.html  file.

But the website will not resolve at all.  There is an error message. I know the DNS is ok because I have other websiute in teh same IIS and are resolving.   here I havehttp://www.csgrouppr.com  resilves ok but thenhttp://www.bosskeeper.com  ends in a dead page. But they both have the same content and the bindings corretly configured.

I have isntalled Php using the  Manager , btu I do nto have any clue as to trooubleshoot this.

UPDATE:

Further looking at my issue, I found that the website resolves when the address entered has no www subdomain http://csgrouppr.com  and  http://bosskeeper.com  . I am puzzle because I have both binds configure at IIS.

look here http://prntscr.com/qh55hh

This is probably something very simple. I set up a simple ASP-based web server on Server 2012R2. The IP address of the web server is 192.168.18.142. I then opened up a browser (Chrome). Any of these URLs bring up the website on the web server just fine.

• http://localhost/
• http://127.0.0.1/
• http://192.168.18.142/

Then I went to a different machine (behind the same router), opened the browser and tried to bring up:

• http://192.168.18.142/

However I received this error in the browser:

500 - Internal server error. There is a problem with the resource you are looking for, and it cannot be displayed.

I even tried turning off the Windows Firewall on the web server to no avail. Any idea what configuration settings to look at?

I don't see anything in the server log files.

Friends, I need your help again, today launched a laptop that is running Windows Server 2019 with IIS 10 on which I am developing a site, there is a site written in php which later I plan to rebuild for asp.net core, I made a certificate import mydomain_com.pfx and made https binding to the desired domain by selecting a certificate for this domain. When I access the domain through http, everything works fine, when through https protocol, I get "HTTP Error 503. The service is unavailable." however, whatever the contents of the php site files or static html file, the result is the same err 503.

My experience with Windows Server for less than a week, found a log file with the following contents C:\Windows\System32\LogFiles\HTTPERR
2020-01-06 08:37:35 127.0.0.1 2031 127.0.0.1 443 HTTP/2 GET / 17 503 - N/A -
2020-01-06 08:50:21 127.0.0.1 2356 127.0.0.1 443 HTTP/1.1 GET / - 503 - N/A -

I noticed an interesting feature, everything works fine on the main server and the protocol is active, everything just happens on my laptop. Perhaps it matters, the server and laptop are on the same network, both behind a NAT router, port 443 and 80 were forwarded to the server.

Thank you!

I am new to IIS .... changing over from Apache.

I have set up everything on a new server running Server 2019.  The website has been added but I can't get it to come up.

Ports are open (80 and 443) and IUSR has been added to the user group.

Checked the binding and the basic settings.  Everything seems to be correct...... but, I can't get it to come up in the browser. 

Also tried bringing it up using "LocalHost" without success.

Hoping someone can point me in the right direction.

Thanks

I have read many threads from many location on this topic and none provide a solution, that I can implement or understand. I hope someone can help.

We are running our help system on windows server, with IIS. The site is html, css and javascript only. It is not a .net site.

Our url structure changed in the most recent version and I can't seem to fix the issues with URL rewriting. When I navigate to the old URL it 404s and I have logging and Failure Testing on. I get nothing out of them.

First question: Seeings that the site is not a .net site will adding a rewrite rule to the web.config make any difference?

Second question:

The rule i want to rewrite is as follows

https://subdomain.domain.com/dirA/abc%20help/dirc/file.html

https://subdomain.domain.com/dirA/abcClient/dirc/file.html

that is all.

<rewrite><rules><rule name="abc help to abcClient" stopProcessing="true"><match url="(.*)/abc%20help/(.*)" /><action type="Redirect" url="https://subdomain.domain.com/dirA/abcClient/{R:2}" /></rule></rules></rewrite>

When testing the rule it passes. When running the rule, it fails.

Anyone have any advice.

Hi , i would like to configure URL Rewrite that will respond 410 status code on some pages that are not found. ( not all pages )

for example : http://mysite.com/number/

if some one is accessing  /number/1 and the webpage is exist then show the web page , but if you access /number/2 and it is not exist then reply status code 410 

on all other pages other then /number/? reply status 404 if page not found.

is it possible to configure this ?

Hi,

I've been having a tough time getting the Apache IIS/Tomcat ISAPI_redirect.dll to work in the following environment:

-- Windows Server 2019

-- Tomcat 9

-- Amazon Corretto 8 is the JDK

-- ISAPI_redirect.dll version is : tomcat-connectors-1.2.46-windows-x86_64-iis

-- the jakarta directory is using the DefaultAppPool.

If I disable 32bit Applications on Default AppPool, I get a 500error:

Calling GetFilterVersion on ISAPI filter ...\Tomcat 9.0\bin\isapi_redirect.dll" failed

If I enable 32bit Applications on DefaultAppPool, I get a 400 error. 

I've done the following:

• added the registry item under HKEY_Local_Machine/Software/Apache Software Foundation/Jakarta ISAPI Redirector 1.0/ as suggested at various sites

• In IIS, under ISAPI and CGI Restrictions at the server level, allowed the isapi_redirect.dll and set it to "execute" 

• In IIS, under the website, I have created a handler mapping for *.dll and pointed it at the dll.

• In IIS, under the website, I have created a "jakarta" application

• In IIS, under the website, I have added an ISAPI Filter entry pointing to the dll and named "jakarta"

• I've made sure that the permissions for "USERS" on the directory containing the dll and on the jakarta application in IIS are set to Full control (at least for now. I'll reduce them if I get this working). 

The dll does not seem to function at all - it doesn't create any logs, and blocks IIS from working - every request ends up with the same 500 error.  

Any help would be appreciated, even suggestions for where else to look for support for the Redirector. 

Thanks