About IIS server

Source: Internet
Author: User
Tags ftp site gopher nntp windows 5 account security
What is IIS
Internet Information Server (IIS) is a World Wide Web server. Gopher server and FTP server are all inclusive. IIS means that you can publish web pages and generate pages using ASP (Active Server Pages), Java, and VBScript. It has some extension functions. IIS supports some interesting things, such as the FrontPage, Index Server, and net show)
Secondly, IIS is a file and application server provided along with Windows NT Server 4.0. It is a basic component for creating an Internet server on Windows NT Server. It is fully integrated with Windows NT Server and allows you to build powerful and flexible Internet/Intranet sites using the built-in security of Windows NT server and the NTFS file system.
1. IIS Installation
IIS can be installed during Windows NT installation, or after Windows NT is installed, use "Add/delete programs" in "Control Panel" to install IIS. The installation path is: i386 \ inetsrv \ inetstp.exe. The ODBC driver must be added during installation.
2. IIS Management
IIS is managed through Internet service manager. There are two versions of ISM, one running as a common application and the other running in a web browser, the difference between the two is that the latter cannot start or stop Internet services.
ISM (Application Mode) Management Interface: select View Report, Server View, and service view in the View menu to get three views:
The default report view displays the selected computer and installed services in alphabetical order. In this view, you can connect to the server and display its properties dialog box. You can start, stop, or suspend services, and select which services (FTP, WWW, And gopher) are displayed ).
The Server View displays the name of the computer that runs the internet service on the network. Open the computer to view the running Internet service. Double-click the server name to display its properties dialog box.
The service view lists all Internet services. Open the service to see which computers are running the service. Double-click the computer name under the service to open the Service Properties dialog box on the computer.
3. IIS security
The core security of IIS depends on the built-in security of Windows NT Server. IIS also has built-in security. Including encryption, verification, and IIS extension.
(1) Windows NT Server Security: Windows NT provides user account security and NTFS security.
① User Account Security: Windows NT requires users to provide valid accounts and passwords to Access Windows NT. When IIS is installed, an Internet Guest account is created. By default, all IIS users use this account to log on to the server. This account only allows local logon and has no other rights. If a remote user is allowed to log on to the Internet Guest account, the user name and password of the remote user are not required. Windows NT is treated as an Internet Guest account.
② NTFS file security: NTFS provides security, controls access to data files, and places data files in NTFS partitions. NTFS can precisely control which users and groups access files and directories with what permissions.
(2) IIS security: In addition to Windows NT Security Measures, IIS also has security control capabilities. Use the account name and password to control access: You can configure the WWW Service to provide a valid user name and password before the user connects to the server.
Http://www.xfdiy.com/bbs
____________________________________________________________________
Overview of IIS server Creation
IIS (Internet Information Server) is a web service component, including Web servers, FTP servers, NNTP servers, and SMTP servers, it is used for Webpage Browsing, file transmission, news services, and email sending. It makes it easy to publish information on the Internet (including the Internet and Local Area Network. This article describes how to configure and manage IIS 2000 in Windows 5.0 Advanced Server Edition.

Prepare to add and run IIS

1. Add IIS

Go to "Control Panel", select "Add/delete Programs> Add/delete Windows components", and remove the hooks before "Internet Information Service (IIS)" (if any ), after the check box is selected, follow the prompts to add the IIS component. The IIS component added in this way includes all four services, including web, FTP, nntp, and SMTP.

Ii. IIS running

After IIS is successfully added, Go to Start> program> Management Tools> Internet Service Manager to open the IIS manager. For services with the words "STOPPED, right-click them and select "start" to enable them.

Article 1 IIS Web Server

1. Create the first web site

For example, if the IP address of the local machine is 192.168.0.1 and your webpage is stored in the D:/wyvisual directory, the first page of the webpage is named index.htm. Now I want to establish my own Web server based on these.

For this web site, we can use the existing "Default web site" to make the corresponding changes, you can easily implement. Right-click the "Default web site" and select "properties" to go to the "Default web site properties" setting page.

1. Modify the bound IP Address: Go to the "web site" window, and then select the desired local IP Address "192.168.0.1" from the "ip address" drop-down menu ".
2. modify the main directory: Go to the "main directory" window, and enter the "D:/WY" Directory of Your webpage in the "local path" (or click "Browse.
3. Add the homepage file name: success ".
4. add a virtual directory. For example, if your home directory is under "D:/WY" and you want to enter the format of "192.168.0.1/test", you can call up "E: in/All, the "test" is the virtual directory. Right-click "Default web site", select "New> virtual directory", enter "test" in "alias", and enter "E: /All.
5. test the effect: Open IE, enter "192.168.0.1" in the address bar, and then press the Enter key to bring up the homepage of Your webpage. This indicates that the setting is successful!

2. Add more websites

1. multiple IP addresses correspond to multiple web sites. If you want to use different IP addresses to obtain different web pages, you only need to right-click the default web site, select "New> site", and enter any content (for example, "my second web site") in the "Description" field as prompted ") in the drop-down menu of "Enter the IP address used by the web site", select the IP address to bind to it. After the web site is created, set the IP address in the previous step.

2. one IP address corresponds to multiple web sites. After all the web sites are created in the previous step, you can set different port numbers for web sites as virtual hosts, for example, set a Web site to 80, a site to 81, and a site to 82 ......, For websites whose port number is 80, the ACCESS format is still the IP address. For websites bound to other port numbers, the corresponding port number must be added to the IP address, that is to say,"Http: // 192.168.0.1: 81Format.

Obviously, it is more difficult to use it after the port number is changed. If you have mapped all the domain names you need to this unique IP address on the DNS server, you can set different "host headers, this allows you to directly use a domain name to access different web sites.
For example, if you only have one IP address 192.168.0.1 on your local machine, you have already created (or set) two web sites, one is "Default web site" and the other is "My second web site ", now you want to enter"Www.enanshan.com"You can directly access the former and enter"Www.popunet.comYou can directly access the latter. The procedure is as follows:

Make sure that the two domain names have been mapped to the IP address on the DNS server first, and make sure that the port numbers of all web sites are kept as the default value of 80.

Select "Default web site> right-click> Properties> Web site", and click "advanced" on the right of "ip address, on the "this site has multiple identifiers" Page, double-click the existing IP address (or click it and then press the "edit" button), and then enter"Www.enanshan.comClick OK to save and exit.

Then, set the new host header name for "My second web site" in the same way as in the previous step.Www.popunet.com.

Finally, open your IE browser and enter different URLs in the address bar to bring up the content of different web sites.

3. Multiple Domain Names correspond to the same web site

You only need to bind an IP address to the web site, and then map all the domain names in the DNS server to your IP address. Then, enter any domain name in the browser, you can directly obtain the content of the website you have set.

Iii. Remote Management of IIS services

1. Right-click "manage Web sites", select "properties", go to the "Web sites" window, and select "ip address ".

2. go to the "Directory Security" window and click "edit" under "IP address and domain name restriction, click "authorize access" to allow the client to manage IIS from a place outside the local machine. Then, click "OK.

3. Enter the"Http: // 192.168.0.1: 3598"(3598 for its port number) format, a password inquiry window will appear, enter the Administrator account name (Administrator) and the corresponding password to log on successfully, now you can remotely manage IIS in the browser! The management scope mainly includes creating, modifying, starting, stopping, and deleting websites and FTP sites.

4. FAQs in this section

Q: Some of the URLs involved in the preceding section Add"Http ://", Some do not add, what does this mean?
A: No"Http ://"Part of the web site, indicating that it can be added or not; but added"Http ://", It indicates that it is essential, for the URL with a port number must be added; otherwise, it can be omitted.

Q: Can I replace the IP addresses mentioned above with a "friendly" name?
A: Yes! In addition to using the computer name of the IIS server, you can also create a ing table for the domain name and corresponding IP address on the DNS server to access the domain name.

Q: I have set up a Web server, but a password prompt window appears when I access the webpage. Why?
A: The password prompt window appears when you access the web site. Generally, check the password one by one for the following reasons:

1. The accessed webpage file is encrypted. For example, the "iisstart. asp" homepage file under "E:/inetpub/wwwroot" in the original home directory of "Default web site" requires a password.

2. if anonymous access is not allowed or the modification is not necessary, you must first check the "Anonymous Access" option; in addition, in "edit", "Anonymous User Account", "User Name" should be in the format of "iusr_nodisk" (where "nodisk" is the computer name). In addition, you must also check "allow IIS to control passwords.

3. Your target directory has limited access permissions. This option is only available when the directory is in an NTFS format partition. Right-click it, select "properties", and enter the "Security" window to check whether the list shows the status that allows the "everyone" group to be fully controlled by default. If not, please change it back.

Article 2 FTP server in IIS

1. Create an FTP site

For how to set up the first FTP site ("Default FTP site") and how to create more FTP sites, refer to the previous operations on the Web server. Note that if you want to use an IP address to correspond to multiple different FTP servers, you can only use different port numbers instead of "Host header name.

For an established FTP server, access via a browser will be in the format of "ftp: // 192.168.0.1" or "ftp: // 192.168.0.1: 22 "; in addition to anonymous users (anonymous, FTP in IIS uses the user library that comes with Windows 2000 (you can find "user" in "Start> program> Management Tools> Computer Management" to manage the user library ).

Ii. FAQs in this section

Q: How do I modify the system prompt information when the FTP server is successfully logged on or exited?
A: Right-click the FTP site, select "properties", go to the "message" window, and enter the welcome information after successful logon in the "welcome" area, in "exit", enter the user's farewell message when exiting.

Q: Why can't ordinary users log on to the FTP server except the Administrator and anonymous user (anonymous) after the FTP server is created successfully; it can be used normally on other computers. Why?
A: By default, normal users do not have the permission to log on to the local machine. To modify the policy, go to "Start> program> Management Tools> Local Security Policy" and select "Left frame> Local Policy> User Privilege assignment ", double-click "Log on locally" in the frame on the right, and add the common users to the list.

Article 3 SMTP server in IIS

If you suspect that free mails sent over the Internet are too slow, you may consider using IIS to create a local SMTP server. Whether you are directly connected to the Internet or through a LAN, whether you have a static IP address or a dynamic IP address, you can easily establish it.

The method to create an SMTP server under IIS is very simple. You only need to make the "Default SMTP virtual server" in the IIS manager in the started State. In addition, you generally do not need to make any other settings.

If you want to use your SMTP server to send mail, you only need to fill in "localhost" in "SMTP" in your e-mail client settings ", it works normally no matter how your IP address changes.

When you use your SMTP server to send e-mail, it is not only not subject to human freedom, but also lightning speed, which is the best choice for individual SMTP servers.

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.