Internet Information Services

Microsoft IIS

Screenshot of IIS Manager console of Internet Information Services 8.5

Developer(s)| Microsoft
Initial release| May 30, 1995; 30 years ago (1995-05-30)
Written in| C++[1]
Operating system| Windows NT
Available in| Same languages as Windows
Type| Web server
License| Part of Windows NT (same license)
Website| www.iis.net

Microsoft IIS (Internet Information Services, IIS, 2S) is an extensible web server created by Microsoft for use with the Windows NT family.[2] IIS supports HTTP, HTTP/2, HTTP/3, HTTPS, FTP, FTPS, SMTP and NNTP. It has been an integral part of the Windows NT family since Windows NT 4.0, though it may be absent from some editions (e.g. Windows XP Home edition), and is not active by default. A dedicated suite of software called SEO Toolkit[3] is included in the latest version of the manager. This suite has several tools for SEO with features for metatag / web coding optimization, sitemaps / robots.txt configuration, website analysis, crawler setting, SSL server-side configuration and more.

## Contents

* 1 History
* 2 Features
* 2.1 Express
* 2.2 Extensions
* 3 Usage
* 4 Security
* 5 See also
* 6 References
* 7 External links

## History

The first Microsoft web server was a research project at the European Microsoft Windows NT Academic Centre (EMWAC), part of the University of Edinburgh in Scotland, and was distributed as freeware.[4] However, since the EMWAC server was unable to handle the volume of traffic going to Microsoft.com, Microsoft was forced to develop its own web server, IIS.[5]

Almost every version of IIS was released either alongside or with a version of Microsoft Windows:

* IIS 1.0 was initially released as a free add-on for Windows NT 3.51.
* IIS 2.0 was included with Windows NT 4.0.
* IIS 3.0, which was included with Service Pack 2 of Windows NT 4.0, introduced the Active Server Pages dynamic scripting environment.[6]
* IIS 4.0 was released as part of the "Option Pack" for Windows NT 4.0. It introduced the new MMC-based administration application and also was the first version where multiple instances of web and FTP servers can run, differentiating them by port number and/or hostname. It was also the first version to run application pools.
* IIS 5.0 shipped with Windows 2000 and introduced additional authentication methods, support for the WebDAV protocol, and enhancements to ASP.[7] IIS 5.0 also dropped support for the Gopher protocol.[8] IIS 5.0 added HTTP.SYS.
* IIS 5.1 was shipped with Windows XP Professional and was nearly identical to IIS 5.0 on Windows 2000.
* IIS 6.0 included with Windows Server 2003 and Windows XP Professional x64 Edition, added support for IPv6 and included a new worker process model that increased security as well as reliability.[9] HTTP.sys was introduced in IIS 6.0 as an HTTP-specific protocol listener for HTTP requests.[10] Also each component (like for example Server Side Includes or ASP) now has to be explicitly installed, because in earlier versions often hackers entered sites by using security bugs of components that were not even in use by the hacked site, improving security.
* IIS 7.0 was a complete redesign and rewrite of IIS and was shipped with Windows Vista and Windows Server 2008. IIS 7.0 included a new modular design that allowed for a reduced attack surface and increased performance. It also introduced a hierarchical configuration system allowing for simpler site deploys, a new Windows Forms-based management application, new command-line management options and increased support for the .NET Framework.[11] IIS 7.0 on Vista does not limit the number of allowed connections as IIS on XP did, but limits concurrent requests to 10 (Windows Vista Ultimate, Business, and Enterprise Editions) or 3 (Vista Home Premium). Additional requests are queued, which hampers performance, but they are not rejected as with XP.
* IIS 7.5 was included in Windows 7 (but it must be turned on in the side panel of Programs and Features) and Windows Server 2008 R2. IIS 7.5 improved WebDAV and FTP modules as well as command-line administration in PowerShell. It also introduced TLS 1.1 and TLS 1.2 support and the Best Practices Analyzer tool and process isolation for application pools.[12]
* IIS 8.0 is only available in Windows Server 2012 and Windows 8. IIS 8.0 includes SNI (binding SSL to hostnames rather than IP addresses), Application Initialization, centralized SSL certificate support, and multicore scaling on NUMA hardware, among other new features.
* IIS 8.5 is included in Windows Server 2012 R2 and Windows 8.1. This version includes Idle worker-Process page-out, Dynamic Site Activation, Enhanced Logging, ETW logging, and Automatic Certificate Rebind.
* IIS 10.0 version 1607 a.k.a. version 10.0.14393 is included in Windows Server 2016 released 2016-09-26 and Windows 10 Anniversary Update released 2016-08-02. This version includes support for HTTP/2,[13] running IIS in Windows containers on Nano Server, a new Rest management API and corresponding web-based management GUI, and Wildcard Host Headers.[14]
* IIS 10.0 version 1709 is included in Windows Server, version 1709 (Semi-Annual Channel) and Windows 10 Fall Creators Update both released 2017-10-17. This version adds support for HSTS, container enhancements, new site binding PowerShell cmdlets, and 4 new server variables prefixed with "CRYPT_".[15]
* IIS 10.0 version 1809 a.k.a. version 10.0.17763 is included in Windows Server 2019 and Windows 10 October Update released 2018-10-02. This version added flags for control of HTTP/2 and OCSP Stapling per site, a compression API and implementing module supporting both gzip and brotli schemes, and a UI for configuring HSTS.[16] IIS 10.0 on Windows 11 and Windows Server 2022 has native support for HTTP/3.

All versions of IIS prior to 7.0 running on client operating systems supported only 10 simultaneous connections and a single website.

Microsoft was criticized by vendors of other web server software, including O'Reilly & Associates and Netscape, for its licensing of early versions of Windows NT; the "Workstation" edition of the OS permitted only ten simultaneous TCP/IP connections, whereas the more expensive "Server" edition, which otherwise had few additional features, permitted unlimited connections but bundled IIS. It was implied that this was intended to discourage consumers from running alternative web server packages on the cheaper edition.[17] Netscape wrote an open letter to the Antitrust Division of the U.S. Department of Justice regarding this distinction in product licensing, which it asserted had no technical merit.[18] O'Reilly showed that the user could remove the enforced limits meant to cripple NT 4.0 Workstation as a web server with two registry key changes and other trivial configuration file tweaking.

## Features

IIS 6.0 and higher support the following authentication mechanisms:[19]

* Anonymous authentication
* Basic access authentication
* Digest access authentication
* Integrated Windows Authentication
* UNC authentication
* .NET Passport Authentication (Removed in Windows Server 2008 and IIS 7.0)[20]
* Certificate authentication

IIS 7.0 has a modular architecture. Modules, also called extensions, can be added or removed individually so that only modules required for specific functionality have to be installed. IIS 7 includes native modules as part of the full installation. These modules are individual features that the server uses to process requests.[21]

IIS 7.5 includes the following additional or enhanced security features:[22]

* Client certificate mapping
* IP security
* Request filtering
* URL authorization

Authentication changed slightly between IIS 6.0 and IIS 7, most notably in that the anonymous user which was named "IUSR_{machinename}" is a built-in account in Vista and future operating systems and named "IUSR". Notably, in IIS 7, each authentication mechanism is isolated into its own module and can be installed or uninstalled.[20]

IIS 8.0 offers new features targeted at performance and easier administration. The new features are:

* Application Initialization: a feature that allows an administrator to configure certain applications to start automatically with server startup. This reduces the wait time experienced by users who access the site for the first time after a server reboot.[23]
* Splash page during application initialization: the administrator can configure a splash page to be displayed to the site visitor during an application initialization.[23]
* ASP.NET 4.5 support: With IIS 8.0, ASP.NET 4.5 is included by default, and IIS also offers several configuration options for running it side by side with ASP.NET 3.5.[24]
* Centralized SSL certificate support: a feature that makes managing certificates easier by allowing the administrator to store and access the certificates on a file share.[25]
* Multicore scaling on NUMA hardware: IIS 8.0 provides several configuration options that optimize performance on systems that run NUMA, such as running several worker processes under one application pool, using soft or hard affinity and more.[26]
* WebSocket Protocol Support[27]
* Server Name Indication (SNI): SNI is an extension to Transport Layer Security, which allows the binding of multiple websites with different hostnames to one IP address (similar to how Host Headers are used for non-SSL sites).[28]
* Dynamic IP Address Restrictions: a feature that enables an administrator to dynamically block IPs or IP ranges that hit the server with a large number of requests[29]
* CPU Throttling: a set of controls that allow the server administrator to control CPU usage by each application pool in order to optimize performance in a multi-tenant environment[30]

IIS 8.5 has several improvements related to performance in large-scale scenarios, such as those used by commercial hosting providers and Microsoft's own cloud offerings. It also has several added features related to logging and troubleshooting. The new features are:

* Idle worker-Process page-out: a function to suspend idle sites to reduce the memory footprint of idle sites[31]
* Dynamic Site Activation: a feature that registers listening queues only to sites that have received requests[32]
* Enhanced Logging: a feature to allow the collection of Server variables, request headers and response headers in the IIS logs[33]
* ETW logging: an ETW provider which allows collecting real-time logs using various Event-tracing tools[34]
* Automatic Certificate Rebind: a feature that detects when a site certificate has been renewed and automatically rebinds the site to it[35]

### Express

IIS Express, a lightweight (4.5–6.6 MB) version of IIS, is available as a standalone freeware server and may be installed on Windows XP with Service Pack 3 and subsequent versions of Microsoft Windows. IIS 7.5 Express supports only the HTTP and HTTPS protocols. It is portable, stores its configuration on a per-user basis, does not require administrative privileges and attempts to avoid conflicting with existing web servers on the same machine.[36] IIS Express can be downloaded separately[37] or as a part of WebMatrix[38] or Visual Studio 2012 and later.[39] (In Visual Studio 2010 and earlier, web developers developing ASP.NET apps used ASP.NET Development Server, codenamed "Cassini".)[40] By default, IIS Express only serves local traffic.[41][39]

### Extensions

IIS releases new feature modules between major version release to add new functionality. The following extensions are available for IIS 7.5:

* FTP Publishing Service: Lets Web content creators publish content securely to IIS 7 Web servers with SSL-based authentication and data transfer.[42]
* Administration Pack: Adds administration UI support for management features in IIS 7, including ASP.NET authorization, custom errors, FastCGI configuration, and request filtering.[43]
* Application Request Routing: Provides a proxy-based routing module that forwards HTTP requests to content servers based on HTTP headers, server variables, and load balance algorithms.[44]
* Database Manager: Allows easy management of local and remote databases from within IIS Manager.[45]
* Media Services: Integrates a media delivery platform with IIS to manage and administer the delivery of rich media and other Web content.[46]
* URL Rewrite Module: Provides a rule-based rewriting mechanism for changing request URLs before they are processed by the Web server.[47]
* WebDAV: Lets Web authors publish content securely to IIS 7 Web servers, and lets Web administrators and hosters manage WebDAV settings using IIS 7 management and configuration tools.[48]
* Web Deployment Tool: Synchronizes IIS 6.0 and IIS 7 servers, migrates an IIS 6.0 server to IIS 7, and deploys Web applications to an IIS 7 server.[49]

## Usage

According to Netcraft, in February 2014, IIS had a "market share of all sites" of 32.80%, making it the second most popular web server in the world, behind Apache HTTP Server at 38.22%. Netcraft showed a rising trend in market share for IIS, since 2012[update].[50] On 14 February 2014, however, the W3Techs shows different results. According to W3Techs, IIS is the third most used web server behind Apache HTTP Server (1st place) and Nginx. Furthermore, it shows a consistently falling trend for IIS use since February 2013[update].[51]

Netcraft data in February 2017 indicates IIS had a "market share of the top million busiest sites" of 10.19%, making it the third most popular web server in the world, behind Apache at 41.41% and nginx at 28.34%.[52]

## Security

IIS 4 and IIS 5 were affected by the CA-2001-13 security vulnerability which led to the infamous Code Red attack;[53][54] however, both versions 6.0 and 7.0 have no reported issues with this specific vulnerability.[55] In IIS 6.0 Microsoft opted to change the behaviour of pre-installed ISAPI handlers,[56] many of which were culprits in the vulnerabilities of 4.0 and 5.0, thus reducing the attack surface of IIS.[54] In addition, IIS 6.0 added a feature called "Web Service Extensions" that prevents IIS from launching any program without explicit permission by an administrator.

By default IIS 5.1 and earlier run websites in a single process running the context of the System account,[57] a Windows account with administrative rights. Under 6.0 all request handling processes run in the context of the Network Service account, which has significantly fewer privileges, so should there be a vulnerability in a feature or custom code it won't necessarily compromise the entire system given the sandboxed environment these worker processes run in.[58] IIS 6.0 also contained a new kernel HTTP stack (`http.sys`) with a stricter HTTP request parser and response cache for both static and dynamic content.[59]

According to Secunia, as of June 2011[update], IIS 7 had a total of six resolved vulnerabilities while[55] IIS 6 had a total of eleven vulnerabilities, out of which one was still unpatched. The unpatched security advisory has a severity rating of 2 out of 5.[55]

In June 2007, a Google study of 80 million domains concluded that while the IIS market share was 23% at the time, IIS servers hosted 49% of the world's malware, the same as Apache servers whose market share was 66%. The study also observed the geographical location of these dirty servers and suggested that the cause of this could be the use of unlicensed copies of Windows that could not obtain security updates from Microsoft.[60] In a blog post on 28 April 2009, Microsoft noted that it supplies security updates to everyone without genuine verification.[61][62]

The 2013 mass surveillance disclosures made it more widely known that IIS is particularly bad in supporting perfect forward secrecy (PFS), especially when used in conjunction with Internet Explorer. Possessing one of the long term asymmetric secret keys used to establish a HTTPS session should not make it easier to derive the short term session key to then decrypt the conversation, even at a later time. Diffie–Hellman key exchange (DHE) and elliptic curve Diffie–Hellman key exchange (ECDHE) are in 2013 the only ones known to have that property. Only 30% of Firefox, Opera, and Chromium Browser sessions use it, and nearly 0% of Apple's Safari and Microsoft Internet Explorer sessions.[63]

## See also

* IIS Metabase
* Logparser
* Microsoft Personal Web Server
* Windows Activation Services
* Comparison of web servers
* List of mail servers

## References

1. ↑ Lextrait, Vincent (February 2010). "The Programming Languages Beacon, v10.0". http://www.lextrait.com/Vincent/implementations.html.
2. ↑ "Running IIS 6.1 as an Application Server (IIS 6.0)". TechNet. Microsoft. https://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/ddf1d92f-3e6e-423f-b024-35cefc10a22f.mspx?mfr=true.
3. ↑ "Getting started with the SEO Toolkit". Microsoft Learn. Microsoft. 11 April 2024. https://learn.microsoft.com/en-us/iis/extensions/iis-search-engine-optimization-toolkit/getting-started-with-the-seo-toolkit.
4. ↑ "Windows NT Internet Servers". Microsoft. 10 July 2002. http://support.microsoft.com/kb/120734.
5. ↑ Kramer, Dave (24 December 1999). "A Brief History of Microsoft on the Web". Microsoft. https://www.microsoft.com/misc/features/features_flshbk.htm.
6. ↑ "Microsoft ASP.NET 2.0 Next Stop on Microsoft Web Development Roadmap". http://www.directionsonmicrosoft.com/sample/DOMIS/update/2004//0804a2nsow.htm.
7. ↑ "Chapter 1 - Overview of Internet Information Services 5.0". 9 December 2009. https://technet.microsoft.com/en-us/library/bb742405.aspx.
8. ↑ "Chapter 2 - Managing the Migration Process". 9 December 2009. https://technet.microsoft.com/en-us/library/bb742407.aspx.
9. ↑ "What's New In IIS 6.0?". http://www.devx.com/webdev/Article/17085/.
10. ↑ arkaytee. "Introduction to IIS Architectures" (in en-us). https://docs.microsoft.com/en-us/iis/get-started/introduction-to-iis/introduction-to-iis-architecture.
11. ↑ "IIS 7.0: Explore The Web Server For Windows Vista and Beyond". http://msdn.microsoft.com/en-us/magazine/cc163453.aspx.
12. ↑ "What's New in Web Server (IIS) Role in Windows 2008 R2". https://technet.microsoft.com/en-us/library/dd560629(WS.10).aspx.
13. ↑ Mike Bishop; David So (September 11, 2015). "HTTP/2 on IIS". Microsoft. https://blogs.iis.net/davidso/http2.
14. ↑ Sourabh Shirhatti (14 June 2022). "New Features Introduced in IIS 10.0". Microsoft. https://docs.microsoft.com/en-us/iis/get-started/whats-new-in-iis-10/new-features-introduced-in-iis-10.
15. ↑ Sourabh Shirhatti; Richard Lang (19 May 2022). "New Features Introduced in IIS 10.0 Version 1709". Microsoft. https://docs.microsoft.com/en-us/iis/get-started/whats-new-in-iis-10-version-1709/new-features-introduced-in-iis-10-1709.
16. ↑ Sourabh Shirhatti. "New Features Introduced in IIS 10.0, version 1809". Microsoft. https://github.com/MicrosoftDocs/iis-docs/blob/6232350988433355e241824a0c5a64f991b54490/iis/get-started/whats-new-in-iis-10-version-1809/new-features-introduced-in-iis-10-1809.md.
17. ↑ "Netscape goes to jail, does not collect $200". InfoWorld. http://www.infoworld.com/pageone/opinions/petrel/petreltwo.htm.
18. ↑ "Differences Between NT Server and Workstation Are Minimal". O'Reilly Media. http://oreilly.com/news/differences_nt.html.
19. ↑ "Authentication Methods Supported in IIS 6.0 (IIS 6.0)". IIS 6.0 Documentation. Microsoft. https://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/523ae943-5e6a-4200-9103-9808baa00157.mspx?mfr=true.
20. ↑ 20.0 20.1 "Changes Between IIS 6.0 and IIS 7 Security". iis.net. Microsoft. 7 February 2010. http://learn.iis.net/page.aspx/110/changes-between-iis-60-and-iis-7-security/.
21. ↑ Templin, Reagan (11 August 2010). "Introduction to IIS 7 Architecture". iis.net. Microsoft. IIS 7 Modules. http://learn.iis.net/page.aspx/101/introduction-to-iis-7-architecture/.
22. ↑ "Available Web Server (IIS) Role Services in IIS 7.5". Microsoft TechNet. Microsoft. 27 January 2010. https://technet.microsoft.com/en-us/library/cc753473.aspx.
23. ↑ 23.0 23.1 Eagan, Shaun (29 February 2012). "IIS 8.0 Application Initialization". IIS Blog. Microsoft. http://www.iis.net/learn/get-started/whats-new-in-iis-8/iis-80-application-initialization.
24. ↑ Yoo, Won (29 February 2012). "IIS 8.0 ASP.NET configuration management". IIS Blog. Microsoft. http://www.iis.net/learn/get-started/whats-new-in-iis-8/iis-80-aspnet-configuration-management.
25. ↑ Eagan, Shaun (29 February 2012). "IIS 8.0 Centralized SSL certificate support". IIS Blog. Microsoft. http://www.iis.net/learn/get-started/whats-new-in-iis-8/iis-80-centralized-ssl-certificate-support-ssl-scalability-and-manageability.
26. ↑ McMurray, Robert (29 February 2012). "IIS 8.0 Multicore Scaling on NUMA Hardware". IIS Blog. Microsoft. http://www.iis.net/learn/get-started/whats-new-in-iis-8/iis-80-multicore-scaling-on-numa-hardware.
27. ↑ "IIS 8.0 WebSocket protocol support". IIS Blog. Microsoft. 28 November 2012. http://www.iis.net/learn/get-started/whats-new-in-iis-8/iis-80-websocket-protocol-support.
28. ↑ Eagan, Shaun (29 February 2012). "IIS 8.0 Server Name Indication". IIS Blog. Microsoft. http://www.iis.net/learn/get-started/whats-new-in-iis-8/iis-80-server-name-indication-sni-ssl-scalability.
29. ↑ McMurray, Robert (29 February 2012). "IIS 8.0 Dynamic IP Address Restrictions". IIS Blog. Microsoft. http://www.iis.net/learn/get-started/whats-new-in-iis-8/iis-80-dynamic-ip-address-restrictions.
30. ↑ Eagan, Shaun (29 February 2012). "IIS 8.0 CPU Throttling". IIS Blog. Microsoft. http://www.iis.net/learn/get-started/whats-new-in-iis-8/iis-80-cpu-throttling-sand-boxing-sites-and-applications.
31. ↑ Benari, Erez (26 June 2013). "Idle Worker-process Page Out". IIS Blog. Microsoft. http://blogs.technet.com/b/erezs_iis_blog/archive/2013/06/26/new-feature-in-iis-8-5-idle-worker-process-page-out.aspx.
32. ↑ Benari, Erez (3 July 2013). "Dynamic Site Activation". IIS Blog. Microsoft. http://blogs.technet.com/b/erezs_iis_blog/archive/2013/07/03/registration-complete.aspx.
33. ↑ Benari, Erez (10 July 2013). "Enhanced Logging". IIS Blog. Microsoft. http://blogs.technet.com/b/erezs_iis_blog/archive/2013/07/10/log-a-rhythm.aspx.
34. ↑ Benari, Erez (15 July 2013). "ETW Logging". IIS Blog. Microsoft. http://blogs.technet.com/b/erezs_iis_blog/archive/2013/07/15/hook-me-up.aspx.
35. ↑ Benari, Erez (3 September 2013). "Automatic Certificate rebind". IIS Blog. Microsoft. http://blogs.technet.com/b/erezs_iis_blog/archive/2013/09/03/certificates-on-the-rebound.aspx.
36. ↑ "IIS Express FAQ". iis.net. Microsoft. 14 January 2011. http://www.iis.net/learn/extensions/introduction-to-iis-express/iis-express-faq.
37. ↑ "Internet Information Services (IIS) 7.5 Express". Download Center. Microsoft. 10 January 2011. https://www.microsoft.com/en-us/download/details.aspx?id=1038.
38. ↑ "IIS Express Overview". iis.net. Microsoft. 14 January 2011. http://learn.iis.net/page.aspx/868/iis-express-overview/.
39. ↑ 39.0 39.1 Hanselman, Scott; Condron, Glen (15 September 2015). "3 Introducing Model View Controller (MVC)". Microsoft. 0:14:02. https://mva.microsoft.com/en-US/training-courses/introduction-to-asp-net-5-13786?l=6Ns0MlpXB_2201937557.
40. ↑ Guthrie, Scott (29 June 2010). "Introducing IIS Express". Microsoft. http://weblogs.asp.net/scottgu/introducing-iis-express.
41. ↑ Gopalakrishnan, Vaidy (12 January 2011). "Handling URL Binding Failures in IIS Express". Microsoft. http://www.iis.net/learn/extensions/using-iis-express/handling-url-binding-failures-in-iis-express.
42. ↑ "FTP Publishing Service". iis.net. Microsoft. http://www.iis.net/download/FTP.
43. ↑ "Administration Pack". iis.net. Microsoft. http://www.iis.net/download/AdministrationPack.
44. ↑ "Application Request Routing". iis.net. Microsoft. http://www.iis.net/download/ApplicationRequestRouting.
45. ↑ "Database Manager". iis.net. Microsoft. http://www.iis.net/download/DatabaseManager.
46. ↑ "IIS Media Services". iis.net. Microsoft. https://azure.microsoft.com/en-us/services/media-services.
47. ↑ "URL Rewrite". iis.net. Microsoft. http://www.iis.net/download/URLRewrite.
48. ↑ "WebDAV Extension". iis.net. Microsoft. http://www.iis.net/download/webDAV.
49. ↑ "Web Deploy 2.0". iis.net. Microsoft. http://www.iis.net/download/webdeployq.
50. ↑ "February 2014 Web Server Survey". news.netcraft.com. Netcraft. 3 February 2014. http://news.netcraft.com/archives/2014/02/03/february-2014-web-server-survey.html.
51. ↑ "Usage statistics and market share of Microsoft-IIS for websites". w3techs. Q-Success. http://w3techs.com/technologies/details/ws-microsoftiis/all/all.
52. ↑ "February 2017 Web Server Survey". news.netcraft.com. Netcraft. 27 February 2017. https://news.netcraft.com/archives/2017/02/27/february-2017-web-server-survey.html.
53. ↑ "CA-2001-13 Buffer Overflow In IIS Indexing Service DLL". CERT® Advisory. Computer emergency response team. 17 January 2002. http://www.cert.org/advisories/CA-2001-13.html.
54. ↑ 54.0 54.1 Hadi, Nahari (2011). Web commerce security: design and development. Krutz, Ronald L.. Indianapolis: Wiley Pub. pp. 157. ISBN 9781118098899. OCLC 757394142.
55. ↑ 55.0 55.1 55.2 "Vulnerability Report: Microsoft Internet Information Services (IIS) 6". Secunia. Secunia ApS. http://secunia.com/advisories/product/1438/?task=statistics.
56. ↑ "IIS Installs in a Locked-Down Mode (IIS 6.0)". Microsoft Developer Network (MSDN). Microsoft. http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/54257c42-d723-4b12-badf-f4902c195821.mspx?mfr=true.
57. ↑ "How To: Run Applications Not in the Context of the System Account in IIS (Revision 5.1) Microsoft Corporation". 7 July 2008. https://support.microsoft.com/en-us/kb/319067.
58. ↑ Henrickson, Hethe; Hofmann, Scott R. (2003). "Chapter 15: ASP.NET Web Services". IIS 6: the complete reference. New York City: McGraw-Hill Professional. p. 482. ISBN 978-0-07-222495-5. https://books.google.com/books?id=_jh9bm8uBk4C&q="Chapter+15:+ASP.NET+Web+Services". Retrieved 12 July 2011.
59. ↑ Henrickson, Hethe; Hofmann, Scott R. (2003). "Chapter 1: IIS Fundamentals". IIS 6: the complete reference. New York City: McGraw-Hill Professional. p. 17. ISBN 978-0-07-222495-5. https://books.google.com/books?id=_jh9bm8uBk4C&q="Chapter+1:+IIS+Fundamentals". Retrieved 12 July 2011.
60. ↑ "Web Server Software and Malware". Google Online Security Blog. http://googleonlinesecurity.blogspot.com/2007/06/web-server-software-and-malware.html.
61. ↑ "Windows Pirates Encouraged to Install Security Updates". USA Today. February 2010. http://content.usatoday.com/communities/technologylive/post/2010/02/windows-pirates-encouraged-to-install-security-updates/1.
62. ↑ Cooke, Paul (27 April 2009). "Who Gets Windows Security Updates?". Windows Security Blog. Microsoft. http://windowsteamblog.com/windows/b/windowssecurity/archive/2009/04/27/who-gets-windows-security-updates.aspx.
63. ↑ SSL: Intercepted today, decrypted tomorrow, Netcraft, 25 June 2013.

## External links

* No URL found. Please specify a URL here or add one to Wikidata.

* v
* t
* e

Microsoft Windows components

Management
tools|

* App Installer
* Command Prompt
* Control Panel
* Applets
* Device Manager
* Disk Cleanup
* Disk Defragmenter
* Driver Verifier
* DxDiag
* Event Viewer
* IExpress
* Management Console
* Netsh
* Performance Monitor
* Recovery Console
* Resource Monitor
* Settings
* Sysprep
* System Configuration
* System File Checker
* System Information
* System Policy Editor
* System Restore
* Task Manager
* Windows Error Reporting
* Windows Ink
* Windows Installer
* PowerShell
* Windows Update
* Windows Insider
* WinRE
* WMI

Apps|

* Alarms & Clock
* Calculator
* Calendar
* Camera
* Character Map
* Cortana
* Edge
* Fax and Scan
* Feedback Hub
* File Manager
* Get Help
* Groove Music
* Magnifier
* Mail
* Messaging
* Maps
* Media Player
* Movies & TV
* Mobility Center
* Money
* News
* Narrator
* Notepad
* OneDrive
* OneNote
* Paint
* Paint 3D
* People
* Phone Companion
* Photos
* Quick Assist
* Snipping Tool
* Speech Recognition
* Skype
* Sports
* Sticky Notes
* View 3D
* Store
* Tips
* Voice Recorder
* Wallet
* Weather
* Windows To Go
* Windows Story Remix
* WordPad
* Xbox Console Companion
* Your Phone

Shell|

* Action Center
* Aero
* AutoPlay
* AutoRun
* ClearType
* Explorer
* Search
* Indexing Service
* IFilter
* Saved search
* Namespace
* Special folder
* Start menu
* Taskbar
* Task View
* Windows Spotlight
* Windows XP visual styles

Services|

* Service Control Manager
* BITS
* CLFS
* Multimedia Class Scheduler
* Shadow Copy
* Task Scheduler
* Error Reporting
* Wireless Zero Configuration

File systems|

* CDFS
* DFS
* exFAT
* IFS
* FAT
* NTFS
* Hard link
* Junction point
* Mount Point
* Reparse point
* Symbolic link
* TxF
* EFS
* ReFS
* UDF

Server|

* Domains
* Active Directory
* DNS
* Group Policy
* Roaming user profiles
* Folder redirection
* Distributed Transaction Coordinator
* MSMQ
* Windows Media Services
* Rights Management Services
* IIS
* Remote Desktop Services
* WSUS
* SharePoint
* Network Access Protection
* PWS
* DFS Replication
* Remote Differential Compression
* Print Services for UNIX
* Remote Installation Services
* Windows Deployment Services
* System Resource Manager
* Hyper-V
* Server Core

Architecture|

* Architecture of Windows NT
* Startup process
* NT
* Vista
* CSRSS
* Desktop Window Manager
* Portable Executable
* EXE
* DLL
* Enhanced Write Filter
* Graphics Device Interface
* hal.dll
* I/O request packet
* Imaging Format
* Kernel Transaction Manager
* Library files
* Logical Disk Manager
* LSASS
* MinWin
* NTLDR
* Ntoskrnl.exe
* Object Manager
* Open XML Paper Specification
* Registry
* Resource Protection
* Security Account Manager
* Server Message Block
* Shadow Copy
* SMSS
* System Idle Process
* USER
* WHEA
* Win32 console
* Winlogon
* WinUSB

Security|

* Security and Maintenance
* AppLocker
* BitLocker
* Credential Guard
* Data Execution Prevention
* Family Safety
* Kernel Patch Protection
* Mandatory Integrity Control
* Protected Media Path
* User Account Control
* User Interface Privilege Isolation
* Windows Defender
* Windows Firewall

Compatibility|

* COMMAND.COM
* Virtual DOS machine
* Windows on Windows
* WoW64
* Windows Subsystem for Linux

API|

* Active Scripting
* WSH
* VBScript
* JScript
* COM
* ActiveX
* ActiveX Document
* COM Structured storage
* DCOM
* OLE
* OLE Automation
* Transaction Server
* DirectX
* .NET Framework
* Universal Windows Platform
* Windows Mixed Reality
* Windows Runtime
* WinUSB

Games|

* Solitaire Collection

Discontinued|

| Games|

* 3D Pinball
* Chess Titans
* FreeCell
* Hearts
* InkBall
* Hold 'Em
* Purble Place
* Reversi
* Spider Solitaire
* Solitaire
* Tinker

|

Apps|

* ActiveMovie
* Anytime Upgrade
* Address Book
* Backup and Restore
* Cardfile
* CardSpace
* CD Player
* Contacts
* Desktop Gadgets
* Diagnostics
* DriveSpace
* DVD Maker
* Easy Transfer
* Fax
* Food & Drink
* Help and Support Center
* Health & Fitness
* HyperTerminal
* Internet Explorer
* Journal
* Media Center
* Meeting Space
* Messaging
* Messenger
* Mobile Device Center
* Movie Maker
* MSN Dial-up
* NetMeeting
* NTBackup
* Outlook Express
* Travel
* Photo Gallery
* Photo Viewer
* Program Manager
* Steps Recorder
* Syskey
* WinHelp
* Write

Others|

* ScanDisk
* File Protection
* Media Control Interface
* Next-Generation Secure Computing Base
* POSIX subsystem
* Interix
* Video for Windows
* Windows SideShow
* Windows Services for UNIX
* Windows System Assessment Tool
* WinFS

Spun off to
Microsoft Store|

* DVD Player
* Hover!
* Mahjong
* Minesweeper

* v
* t
* e

Microsoft

* History
* Outline

People|

| Founders|

* Bill Gates
* Paul Allen

|

Board of directors|

* John W. Thompson (Chairman)
* Satya Nadella (CEO)
* Bill Gates
* Charles Noski
* Helmut Panke
* John W. Stanton
* Reid Hoffman
* Sandi Peterson
* Penny Pritzker
* Charles Scharf
* Arne Sorenson
* Padmasree Warrior

Senior leadership team|

* Satya Nadella (CEO)
* Scott Guthrie
* Amy Hood (CFO)
* Harry Shum
* Phil Spencer

Corporate VPs|

* Joe Belfiore
* Richard Rashid (SVP)
* S. Somasegar (SVP)
* César Cernuda

Products|

| Hardware|

* Azure Kinect
* HoloLens
* LifeCam
* Surface
* Hub
* Go
* Laptop
* Pro
* Studio
* Xbox

|

Operating systems|

* Windows
* Xbox OS

Software|

* Office
* Office 365
* Mobile
* Servers
* Visual Studio

Web properties|

* Azure
* Bing
* Channel 9
* CodePlex
* Developer Network
* Docs
* MSN
* Mixer
* Office.com
* OneDrive
* Outlook.com
* Store
* TechNet
* Translator

Company|

| Conferences|

* Build
* Ignite
* Inspire (formerly TechEd)
* MIX
* PDC
* WinHEC

|

Divisions|

* Engineering groups
* Mobile
* Skype unit
* Digital Crimes Unit
* Garage
* Press
* Research
* .NET Foundation
* Outercurve Foundation
* Xbox Game Studios

Estates|

* Microsoft Redmond campus
* Microsoft Talo
* Microsoft Algeria
* Microsoft Egypt
* Microsoft India
* Microsoft Japan
* Microsoft Theater

Campaigns|

* Where do you want to go today? (1994)
* Champagne (2002)
* Mojave Experiment (2006)
* I'm a PC (2008)
* Scroogled (2012)

Criticism|

* Bundling of Microsoft Windows
* Clippy
* iLoo
* Internet Explorer
* Microsoft Bob
* NSAKEY
* Windows
* XP
* Vista
* 10

Litigation|

* Alcatel-Lucent v. Microsoft
* Apple v. Microsoft
* European Union Microsoft competition case
* Microsoft v. Lindows
* Microsoft v. MikeRoweSoft
* Microsoft v. Shah
* United States v. Microsoft (2001 antitrust case)
* Microsoft Ireland case

Acquisitions|

* 6Wunderkinder
* Altamira Software
* AltspaceVR
* aQuantive
* Azyxxi
* The Blue Ribbon SoundWorks
* Beam
* Bungie
* Calista Technologies
* Colloquis
* Connectix
* Consumers Software
* Danger
* Farecast
* FASA Studio
* Fast Search & Transfer
* Firefly
* Forethought
* GIANT Company Software
* GitHub
* GreenButton
* Groove Networks
* High Heat Major League Baseball
* Hotmail
* Jellyfish.com
* LinkedIn
* LinkExchange
* Lionhead Studios
* Maluuba
* Massive Incorporated
* Mobile Data Labs
* Mojang
* Nokia Devices and Services
* Onfolio
* Pando Networks
* Perceptive Pixel
* PlaceWare
* Powerset
* ProClarity
* Rare
* Revolution Analytics
* ScreenTonic
* Secure Islands
* Simplygon
* Skype
* Sunrise Atelier
* SwiftKey
* Winternals Software
* Teleo
* Telekinesys Research
* Tellme Networks
* Twisted Pixel Games
* Vermeer Technologies
* Visio Corporation
* Vivaty
* VoloMetrix
* VXtreme
* WebTV Networks
* Xamarin
* Yammer
* Yupi

* Category

* v
* t
* e

Email servers

Open source|

| Current|

* Apache James
* Citadel/UX
* Courier Mail Server
* Cyrus IMAP server
* Dovecot
* Exim
* hMailServer
* Kolab
* Kopano
* OpenSMTPD
* Postfix
* Qmail
* Sendmail
* MeTA1
* Zarafa
* Zentyal
* Zimbra

|

Discontinued|

* Delivermail
* Hula
* qpopper
* UW IMAP

Proprietary|

* Axigen
* CommuniGate Pro
* Eudora Internet Mail Server
* Gordano Messaging Suite
* IBM/Lotus Notes/Domino
* IceWarp Mail Server
* Internet Information Services
* Ipswitch IMail Server
* Kerio Connect
* Mercury Mail Transport System
* Microsoft Exchange Server
* Novell GroupWise

Related technologies|

* Extended SMTP
* IMAP
* POP
* Push-IMAP
* SMAP
* SMTP
* UUCP

Related articles|

* Email
* Unicode and email

* Category
* Comparison
* List

0.00

(0 votes)

Original source: https://en.wikipedia.org/wiki/Internet Information Services. Read more

|

Retrieved from "https://handwiki.org/wiki/index.php?title=Software:Internet_Information_Services&oldid=4136564"
*[v]: View this template
*[t]: Discuss this template
*[e]: Edit this template