How to configure iis security with nsis?

Vankov
24th August 2009 14:56 UTC

How to configure iis security with nsis?
open the IIS manager (Start->Control Panel->Administrative Tools->Internet Information Services)
Expand <COMPUTER NAME>(Local Computer)->WEB Sites->Default WEB Site
Open Properties page for <Reports> item, go to 'Directory Security'-> Edit (into Anonimous access area)
Note the name of the 'User Name' that will be used for anonimous access
Enable anonimous access
Open Properties page for <ReportServer> item, go to 'Directory Security'-> Edit (into Anonimous access area)
Disable anonimous access
How to do that?

Yathosho
24th August 2009 16:57 UTC

i'd find out what applying these settings really does. try FileMon and RegMon to find out, then take the appropriate action (change a registry key or maybe an ini file).

maybe should find out what you need to do and ask in a forum for IIS?

jpderuiter
24th August 2009 17:40 UTC

You can export and import IIS configurations via commandline scripts.
See http://www.microsoft.com/technet/pro...c4c10827d.mspx

Rovastar
27th August 2009 16:34 UTC

Wow a thread on IIS>
As a living I also work as an IIS consultant and a regular contributor to the microsoft IIS forums at www.iis.net

Things I would worry about.

IIS 5 (windows 200,xp 32bit), 6 (windows 2003, xp 64bit) and 7 (windows 2008, vista) will have different setups not one script will work for each of these.

You will need to tailor your scripts, etc for each version of IIS for you installer.

Also you are fixing your installer to teh DEfault WEb site site with the above logic. What if the users doesn't install the site in the default website?

If you want to use some educated guesswork then the <IUSR_machine name> account is most commonly used for the anonymous access and that is what all sites will have by default for IIS5, 6.

I suppose the correct way will be to lookup with the IIS script the site you you want. If you are fancy make a dropdown list of the sites on the machine and then take the username for anonymous access (if it is even used)

Hope it helps