IIS 6.0 Server Administration

The IIS 6.0 Migration Tool (iiscnfg.vbs) migrates only one site at a time, whereas tools like MetaEdit 2.2 or Metabase Explorer allow administrators to manipulate and migrate the metabase configuration for multiple sites simultaneously.

TLS (Transport Layer Security) is the successor to SSL that extends it by providing cryptographic authentication at the transport layer. It maintains compatibility while enhancing security, making it more than just another name for SSL.

When anonymous users connect to an IIS web site, they are authenticated using the built-in IUSR_computername account (e.g., IUSR_SERVER01). This account is created automatically during IIS installation and is used for anonymous authentication. The account name uses the computer name, not domain name or virtual directory name.

IIS (Internet Information Services) stores log files in the W3SVC1 directory by default, where W3SVC1 represents the default website instance. The path C:\WINDOWS\system32\Logfiles\W3SVC1 is the standard location for the Default Web Site's logs. Options A and B are incomplete paths, while W8SVX10 is not a valid IIS website identifier.

Socket pooling is a feature in IIS that allows multiple worker processes to share socket connections, reducing overhead and improving performance. This optimization is particularly useful in scenarios with multiple websites on the same server, as it minimizes the number of socket connections that need to be created and maintained.

IIS 6.0 does not impose a hard-coded limit on the number of application pools you can create. However, Microsoft recommends not creating more than 60 application pools because each pool consumes memory and resources, which can lead to performance degradation and system instability.

IIS does not allow the idle timeout to be set longer than the time-based recycling interval. When this configuration is attempted, IIS ignores the custom settings and falls back to default values. This prevents conflicts between the two recycling mechanisms.

IIS supports FTP user isolation, which restricts FTP users to their designated directories and prevents them from accessing other users' files. This feature enhances security in multi-tenant FTP environments by ensuring proper user separation.

An ISAPI filter can intercept IIS web server responses and modify headers (such as the 'Server' header) to hide or spoof the identity of the web server. Firewalls block traffic but do not natively rewrite application-layer headers in this manner.

http.sys is the kernel-mode HTTP protocol listener in IIS that handles static file serving. It operates at the kernel level for improved performance and security, handling HTTP requests before they reach the worker processes.

Virtual directories in IIS cannot be renamed directly once created. The correct approach is to delete the existing virtual directory and recreate it with the desired name. This is a limitation of the IIS configuration system.

iisapp.vbs is a command-line administrative tool that lists running worker processes and maps them to their associated application pools and applications. This mapping is essential for troubleshooting process-related issues in IIS.

The overhead of checking host headers in IIS is negligible compared to the total cost of processing an HTTP request. Host headers enable multiple websites to share a single IP address without significant performance impact.

DOS in the context of IIS and web servers refers to Denial of Service attacks. These attacks flood the server with malicious requests, making it unavailable to legitimate users. IIS has built-in features to mitigate such attacks.

Processor affinity in IIS binds worker processes for a specific application pool to specific CPU cores. This configuration can improve performance by increasing cache locality and reducing context switching overhead between processors.