How to install IIS Web Management Service (WMSVC) using PowerShell in Windows Server Core

Here is a short post for you on how to install and enable IIS Web Management Service (WMSVC) in Windows Server Core, using PowerShell. This allows you to remotely manager your IIS webservers. If you want a graphical (or GUI) tool to install in Windows (Server or 11/10), see Install and setup IIS Manager for Remote Administration in Windows Server IIS.

Read more

3 Ways of blocking sendmail.php on IIS webserver

Here are 3 ways of blocking access to a PHP sendmail.php script on your Windows Server IIS webserver. This comes in handy if a websites on your webserver sends out spam and you need to block access to a script on a specific website or globally in IIS. You can use a web.config file for this purpose, and here is how.

Read more

Monitor IIS application pools in Zabbix, part 1

Zabbix can harnas the powers of WMI (Windows Management Instrumentation) to query the Windows system for data. In Zabbix you use wmi.getall for this. Here is a small introduction to query the number of running w3wp.exe processes per application pool in Zabbix so you can start monitoring Microsoft Windows Server IIS with Zabbix.

Read more

Set PHP handler accessPolicy (Request Restrictions) to Read in IIS

Disallow direct access to PHP files in wp-content/uploads/

It’s recommended to disallow access to and execution of PHP files in wp-content/uploads folder. Preferably without the use of a security plugin. Blocking access to PHP files in WordPress wp-content/uploads folder is easily achieved with a .htaccess file on Linux Apache, or web.config accesssPolicy in Windows Server IIS, and here is how.

Read more

HTTP Basic authentication

Basic Authentication module for Windows Server IIS 10

Basic Authentication managed HTTP module for IIS 10 with virtual users support

In my pursuit of a basic authentication alternative in IIS, other than the built-in Basic Authentication module or Helicon Ape, I came across Devbridge AzurePowerTools. It’s apparently one of few HTTP managed modules for IIS that enables HTTP Basic Authentication with support for virtual users.

Read more

IIS FTP IP Address and Domain Restrictions

IIS 10.0 FTP IP Security allow list

How to create an IP restrictions allow list for your IIS FTP Server with Powershell.

When you set up a new public facing FTP server in IIS, it is important to properly secure it. Of course there’s authentication and authorization, but in this post I’ll show you how to configure an IP allow list for FTP using PowerShell.

Read more

WSUS Application Pool IIS Advanced Settings

WsusPool keeps crashing: stops again and again

Sometimes you find your WSUS server keeps crashing over and over again. WSUS is unavailable and/or the WSUS management console hangs. When you start to investigate as to why Windows Server Update Services crashes, you’ll notice the following error message being logged in the HTTPErr log files:

Read more

What are 4 important security measures for Windows Server & IIS 10?

When you have just installed your new Windows Server, with or without IIS as web server, it is important to take a few extra security measurements. Securing your server is important to keep hackers out and your data safe. This article provides 4 key steps in securing your Windows Server web (IIS) or file server.

Read more

this screen is a settings overview for the created GPO "Enable Win32 long paths"

Enable NTFS long paths in Windows Server 2016 and 2019 by Group Policy

Windows Server 2016 was finally released last week, meaning we can finally lift the idiotic 260 characters limitation for NTFS paths. In this post I’ll show you how to configure the Enable Win32 long paths setting for the NTFS file system, through Group Policy (a GPO). The NTFS long paths GPO is also required for Windows Server 2022 2019 and 2019.

Read more

Loading time: 83 queries, 0.397 seconds using 46884448 bytes memory. Peak memory usage: 47196008 bytes.