IIS 10: Installing and some configuring

No, is isn't; why do the software programmers have to move things around from version to version? Why add more layers of what I consider junk in the way to do a task or set a parameter? I know why! They think that we have the time to learn three or four programming languages, ya that's gotta be it...

IIS 10 Installing

So what is new with Server 2016 vs. 2008 R2 or 2012? Well the "Manage Your Server" page has grown very large, if you are administering multiple servers say in a domain, that is nice, however most Web Servers are not in a domain, maybe on the same network but few are actually in the domain. So what do I care about other servers when I am working on the web server that is in a DMZ (Digital Media Zone).

So after looking and not finding what I need, clicking here clicking there I found (by mistake) Roles! It is hidden under "Manage" how quaint, after looking all over the main page that is very large with useless information (if someone else was taking care of this server they would not know that some services stop after a certain amount to time) and they may think the server has a - issue! - err problem, ah well.

Under management is "Add a Role" which is what I was looking for fifteen minutes ago... Now to do the deed.

(Note: To stop the Server Manage from filling up your desktop when you logon on the same tab at the bottom of the list is.... Server Manager Properties, click it and a small window will open, select Do not display...)

Hold on there sparky! You forgetting something?     Uhhhhh...

Oh yea, in microsofts great wisdom there is only one volume on the hard drive and only one hard drive in a computer, same as what the CEO of then Micro Soft said in 1987: You will never need more than 640K of memory.

IIS 10 Installing with the Server Manager

The install will place inetpub directory on the System drive, and that will be C:, in the days of IIS 6 or lower you could use a small text file (called an answer file) to tell the installer put the inetpub directory on another drive. Ya, well I found out with IIS 7.5 those days are gone now you need to find all the different scripts to MOVE the install after the install is DONE. Sheeesh.

So off to do the deed:

Select "Add Roles and Features"

Select "Role or feature-based installation"

Start with "Web Server (IIS)" open each menu item for a choice.

I am not a powershell user, I added WebDAV thinking I needed it (I did when the server was IIS 6) but didn't. Sometimes when you make a mistake you have to start over, I could not get this installation to remove the WebDAV even with a powershell guru script. Well I had made an image earlier and it was supper time so I put the image on during supper...  This is a case of be careful what you ask for / click on...

Scrolling down, more items to select.

Now the Features, I have expanded each section. After my first foray and the WebDAV mistake, if I was unsure or didn't know (until after some research, I would come back and go through these pages again.

The end of features, so click next. IIS 10 Installation will take some time to complete.

While I waited for the install to complete I did some Firewall work - more on that  later.

When it is complete I will use a script I found that will move the installation from the C: drive to another drive, then we get to figure out what I need for two web sites...

I had to come back and add the following to the IIS 10 Installation:

Under Roles I had to add:

Security

Then Request Filtering (you can use this to stop a search engine from indexing your site)

Under features I had to add:

I have an email server also and it requires .NET ver 3.5 and the only way to install it is though the features page, I tried to do a standalone install, it would error out - it could only be installed with the features page...

I also installed the Telnet Client to test the email server locally.

TCP Port Sharing (this is required to share the port 443 with other web sites on the server.)

With the IIS 10 installation complete I need to move the directory to the volume that I prepped:

Security first: I used my user ID to take ownership of the volume (drive) before any thing was installed, then I added the following user id's with their select security:

Everyone read only (full drive)

IUSER list, read, execute selected web sites

IIS_USERS (server-name) read, list and execute selected directories

Some directories only need read ,list and execute how ever these need IIS_USERS (server-name)  modify or write:

Logs

Temp

And if you add  a Wordpress site and PHP you will need to allow the IIS_USERS group write for only the WP directory:

 /wp-content  (Note: some pugin's will want to access the wp directory to modify the wp_config file, I wont allow that because the admin ID and password are there!

PHP   (Note: primarily the main directory, however there are a few changes you can do to your Wordpress site that needs to add/modify a dll, those are in the includes directory, once I figured it out I gave modify rights to IIS_USERs

These two temp directories need IIS_USERs modify also:

php-error-log

php-temp

Now I am ready to install the other applications I need, PHP, MySQL, hMailServer.

Once I have all  the parts in place I have to go through over 500 pages and change all urls from H T T P to HTTPS. For the most part fairly easy with an older program that came with Office 2003: Front Page.

Using the search and replace on the folder I named after this web site I let the search and replace do all the old H T T P with the new HTTPS, didn't miss one page, the includes well... that was a differnt matter and took some time to convert.

(Are you wondering why I separate the H T T P with spaces? SSL will not encrypt a page with H T T P in it, HTTPS yes, other no. I did a search for why it does this but couldn't find a good answer, it must be in the SSL module's code to not encrypt a page with that in it...

After IIS 10 installing I need to configure IIS 10 for two web sites, ASP, CGI, FastCGI, MIMES, Handlers, etc (these are on the IIS 6 and IIS 7.5 pages) then work on getting the certificate for diy-computer-repair.net to include fix-it-blog

All of these goodies are on the IIS 10 Web Site Configuration page...