IIS and Web Server Role

  1. Let's encrypt integration

    It would be great to integrate the ACME protocol in IIS. One of the reasons SSL isn't widely used is because it is complex and costly to set up.

    What I would really like to see is in the "edit bindings" window, when choosing a certificate, an option to choose instead Let's Encrypt / ACME. IIS would automatically request the certificate through the ACME protocol and would automatically renew the certificate.

    Obviously this would also be available through powershell (although keep in mind that primary users are likely to be unsophisticated GUI users, not sophisticated teams who run multiple instance…

    44 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  2. Provide support for SHA256 Self Signed Certificates

    Currently, creating Self Signed Certificates in IIS only allows you to create SHA1 algorithm Self Signed Certificates. However, SHA1 is being deprecated in favor of SHA256, therefore, IIS Manager should support creating SHA256 Self Signed Certificates instead (or prompt as to whether you wish to create an SHA1 or SHA256 Self Signed Certificate)

    18 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    3 comments  ·  Flag idea as inappropriate…  ·  Admin →
  3. Integrate ARR Helper in IIS

    AAR Helper functionality should be built-in into IIS.

    17 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Flag idea as inappropriate…  ·  Admin →
  4. Web Deploy Snap-In Bug Report

    First of all, the Web Deploy 3.0 PowerShell SnapIn is really good. it takes away the complexity of the msdeploy.exe tool and can be implemented in a PowerShell Tool very well. But i came across two Bugs which have to be fixed to make this tool really GREAT. First and most of all, the Sync-WDSite cmdlet accepts Publishsettings, either as -sourcesettings or -destinationsettings. But if the Publishsettingsfile is not on the Desktop, and doesn't have this name: Microsoft.Web.Deployment.PowerShell.PublishSettings, the cmdlet throws an error. so i had to workaround this issue by simply copying and renaming the correct publishsettingsfile to the…

    13 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  5. Add native support for processing X-Forwarded-For headers

    Right now, the only supported way to do this is with the ARR Helper which is a module hosted on a blog site that periodically goes down. With the importance of load balancing and SSL termination in today's modern infrastructure, this should be in the core product.

    11 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  6. Bug: Add-WebConfigurationProperty does not correctly add collections

    This is also detailed in the following Reddit post: https://www.reddit.com/r/PowerShell/comments/57bxzd/powershellandiissettingwebdav_rules/

    Summary: Add-WebConfigurationProperty does not correctly add collections

    Component: Powershell IIS Module, specifically Add-WebConfigurationProperty

    Version: Powershell 5 (PSVersion 5.0.10586.117, BuildVersion 10.0.10586.117)

    OS: Windows Server 2012 R2 Datacenter (OS Version: 6.3.9600 N/A Build 9600)

    Description: When adding a configuration property that includes a collection, it does not add the element with the collection defined.

    Steps to reproduce:
    1. Install IIS role with WebDAV support
    2. Create directory for testing on disk (e.g. c:\TestShare)
    3. Create virtual directory pointing to folder under Default Web Site in IIS with same…

    10 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  7. Get-IISAppPool Doesn't Use Latest Information

    I believe I found a bug in the Get-IISAppPool PowerShell cmdlet.

    Create a script with the following:
    * Check if an application pool exists using:
    Get-IISAppPool -Name "Something"
    Where "Something" indicates an application pool name.
    * If the application pool exists, display some text.
    * Otherwise, create the application pool.

    1) Open a PowerShell window (as administrator) and run the script.
    2) The application pool does not exist and is created (correct).
    3) Do not close the window and run the script again.
    4) The script again indicates that the application pool does not exist and tries to create it…

    6 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  8. Please allow IIS Manager to manage remote servers

    IIS Manager is the only console that I use almost daily that cannot connect and manage remote IIS servers. The very some way as Computer management and other MMC consoles. I mean without creating IIS users.

    5 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  9. Bug: request.servervariables server_protocol doesn't report HTTP/2

    On IIS 10, when serving a page over HTTP/2, calling Request.ServerVariables["SERVER_PROTOCOL"] returns HTTPS/1.1 and not HTTPS/2.0.

    This makes it impossible to accurately identify the protocol version in use at runtime.

    5 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Flag idea as inappropriate…  ·  Admin →
  10. PHP Manager & NET 2.0

    Please remove or upgrade the dependency of the installer of PHP Manager, if the server has not .NET 3.5 installed the PHP Manager ICON want to appear inside IIS

    I know that microsoft want to kill IIS for net core but resolve this error, i have to install NET 3.5, install php manager from Web Platform Installer and then remove NET 3.5 (I use 4.7.1)

    Tnx

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  11. Bug: IIS 10 + HTTPS + response.flush() = request is duplicated

    On windows server we installed IIS 10 and an SSL license

    We observe that if we have a page that contains a response.flush() the request is executed twice (Get or POST)

    on FF every request is duplicated, on chrome, IE and Edge the first request is duplicated after that the other request are executed normally (once)

    This bug can be reproduced with a simple page with only:

    <!--- start asp classic--->
    <%
    response.flush
    %>
    <!--- end asp classic--->

    This is problematic with every browser, FF because all the requests are duplicated, even form submissions, others because bug this can happen…

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  12. CLI / PowerShell / WMI - Create a command to get/collect/List Application Pool Performance.

    The ideia:

    Crate a command to get/list/Collect information about Application Pool Performance Monitor.


    • CPU in use

    • Memory in use

    • Disk in use

    • Network in use

    • How many connection on the application pool

    • PID Number

    • Command line with name, version and ...

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  13. Creating a task scheduler in IIS

    If you want to run a task on a schedule (as in every 10 minutes, every hour, the first day of the month, etc), you currently have to rely on external schedulers to trigger these tasks (windows scheduled tasks, azure jobs, etc). However for short running tasks, it should be possible to define a schedule in web.config, with IIS calling a page on schedule. This would make an IIS website a lot cleaner / self contained that having to rely on an external scheduler.

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  14. Support brotli compression

    There are third party modules to support brotli compression but this should be supported by IIS out of the box. Also it looks like it conflicts with the priority IIS uses to pick which compression to use: https://serverfault.com/a/896234/451530

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  15. Please fix FTPS implementation; PROT does not impose proper protection level.

    The above issue makes it impossible to use an IIS FTP Server with popular clients. Clients have started disabling any ability for nonstandard protocol negotiation.

    https://forum.filezilla-project.org/viewtopic.php?t=35275#p131841
    https://www.mail-archive.com/lftp@uniyar.ac.ru/msg03761.html

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  16. Please add some sort of GUI management for IIS

    I don't care if it's via Azure Server Management tools or the Server 2016 server manager, but it would be really nice to have a minimal GUI for managing IIS.

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    3 comments  ·  Flag idea as inappropriate…  ·  Admin →
  17. Add setting to disable "Server" header in responses

    For security purposes, it would be useful to be able to easily disable the "Server" header that is sent by default in IIS HTTP responses so that the web server (IIS) and its version remain private.

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    4 comments  ·  Flag idea as inappropriate…  ·  Admin →
  18. PHP 7 - php_mysql.dll error

    When you install PHP 7 with the Web Platform installer; by default the installation flags errors in the C:\Windows\Temp\PHP70error.log saying phpmysql.dll does not exist

    In IIS this PHP extension is enabled by default even though it was depreciated in version 5 and fully removed in PHP 7

    By default php_mysql.dll needs to be commented out or removed altogether from the extensions list and the error goes away

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  19. Make propeties name case-insensitive for creating app pools. (IIS, WebAdministration module)

    PowerShell is case insensitive language and so are the modules like WebAdministration expected to be.

    Does not work

    PS IIS:\AppPools> Set-ItemProperty .\DefaultAppPool -Name Enable32BitAppOnWin64 -Value $true

    Works

    PS IIS:\AppPools> Set-ItemProperty .\DefaultAppPool -Name enable32BitAppOnWin64 -Value $true

    Difference is only in capital and small letter 'e' in property name. Moreover, the first command doesn't even throw any error.

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  20. IIS Module to Address Website Password Guessing

    A common technique for *********** Testers is to gain access to an account via brute force (many passwords against one account) or password spraying (one password against many accounts). Websites are a great target since they often lack the logging/alerting of these techniques. To address this some implement 2-factor yet this still provides the necessary feedback because only a successful authentication attempt will proceed to the 2-factor prompt.

    To address this I’ve create a PowerShell module which leverages Logparser to parse a website’s logs and identify such situations.

    https://www.powershellgallery.com/packages/WebsiteFailedLogins/1.0
    https://github.com/phbits/WebsiteFailedLogins

    While it’s a suitable solution, the downside is it’s a…

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
← Previous 1
  • Don't see your idea?

IIS and Web Server Role

Categories

Feedback and Knowledge Base