Re: IIS6 - Disaster Recovery -IISCNFG - changing Anonymous User

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 11/03/04 

Date: Wed, 3 Nov 2004 00:29:00 -0800

You can easily use ADSUTIL.VBS to set the password afterwards, without
needing to know how private data structure is encrypted/decrypted nor
serialized. This method is far better than trying to template the Export
file for the username/password parameter and substituting values at import
time.

For example, suppose IIS changes how to encrypt/decrypt such secret
properties between different IIS versions (products have to evolve/improve
over time). You will be broken between every IIS version if you hard-code
to the format. However, if the API allows you to set a property value with
the understanding that the value will be encrypted/decrypted by IIS
appropriately, code using the API will not be broken between IIS versions.
This is why the API exists, and this is why you should use it. You can view
the Export XML as a "shortcut" to move IIS6 configuration around, and not as
a generic means to configure IIS.

ADSUTIL.VBS SET /MSFTPSVC/AnonymousUserPass "password" ( no need to
encrypt/decrypt -- IIS will do it for you accordingly to the current
machine). 

-- 
//David
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Higgs Boson" <higgs.boson@play.net> wrote in message
news:eflVguOwEHA.3668@tk2msftngp13.phx.gbl...
In IIS6 we can use IISCNFG.VBS to export a copy of the metabase to a static
XML file.  This same file can be imported into a Web Servers Metabase.  We
would like to use this functionality to support disaster recovery when a
(non-web farm) Web Server crashes.  Using The import/export functionality
may cause some problems when applied to a recovery web server whose name is
different than the source web server.  For example.  the FTP Service section
of the metabase exports looks like:
<IIsFtpService Location="/LM/MSFTPSVC"
 AdminACL="49634462a00000005... (a very long number)
 AllowAnonymous="TRUE"
 AnonymousOnly="FALSE"
 AnonymousUserName="IUSR_SourceServerName"
 AnonymousUserPass="4963446270000... (a very long number)
Prior to Import into the new "Target Machine" we would like to change the
AnonymousUserName from the Source Name to the Target Name
(like: AnonymousUserName="IUSR_TargetServerName"   )
But how would we change the Anonymous User Password (which is encrypted in
some UNDOCUMENTED way)???
thanks.
dlr

Relevant Pages

  • Re: IIS6 - Disaster Recovery -IISCNFG - changing Anonymous User
    ... and ADSUTIL is ideal for the job. ... to leverage the export/import file (to support disaster recovery planning). ... > properties between different IIS versions (products have to evolve/improve ... > encrypt/decrypt -- IIS will do it for you accordingly to the current ...
    (microsoft.public.inetserver.iis)
  • Re: IIS6 - Disaster Recovery -IISCNFG - changing Anonymous User
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... suppose IIS changes how to encrypt/decrypt such secret ... >> encrypt/decrypt -- IIS will do it for you accordingly to the current ...
    (microsoft.public.inetserver.iis)
  • Re: IIS6 - Disaster Recovery -IISCNFG - changing Anonymous User
    ... to leverage the export/import file (to support disaster recovery planning). ... suppose IIS changes how to encrypt/decrypt such secret ... > properties between different IIS versions (products have to evolve/improve ...
    (microsoft.public.inetserver.iis)