Notifications
Clear all

IIS Configuration

4 Posts
3 Users
0 Likes
718 Views
(@rampage)
Posts: 354
Reputable Member
Topic starter
 

Hello everyone )

Been a while since i last posted something in here.. so, apologises for not having contributed that much lately )

I have a little question
I'm investigating a windows server 2003 SP2 system, and i'm trying to figure out if IIS configurations have been altered/tampered.

Does anyone know where should i look (in the registry or any other configuration place) to view the current IIS configuration?

i'm looking for logging configurations and if third party applications servers were configured to run with IIS.

 
Posted : 03/09/2014 10:13 pm
(@bithead)
Posts: 1206
Noble Member
 

IIS Configuration Reference

Introduction to ApplicationHost.config
ApplicationHost.config is the root file of the configuration system when you are using IIS 7 and above. It includes definitions of all sites, applications, virtual directories and application pools, as well as global defaults for the web server settings (similar to machine.config and the root web.config for .NET Framework settings).

It is also special in that it is the only IIS configuration file available when the web server is installed (however, users can still add web.config files if they want to). It includes a special section (called configSections) for registering all IIS and Windows Activation System (WAS) sections (machine.config has the same concept for .NET Framework sections). It has definitions for locking-down most IIS sections to the global level, so that by default they cannot be overridden by lower-level web.config files in the hierarchy.

The new Configuration System in IIS 7

Hope those get you pointed in the right direction.

 
Posted : 04/09/2014 6:44 am
keydet89
(@keydet89)
Posts: 3568
Famed Member
 

I'm investigating a windows server 2003 SP2 system, and i'm trying to figure out if IIS configurations have been altered/tampered.

What version of IIS are you working with?

Does anyone know where should i look (in the registry or any other configuration place) to view the current IIS configuration?

i'm looking for logging configurations and if third party applications servers were configured to run with IIS.

With some versions of IIS, this information is in the metabase.

 
Posted : 04/09/2014 5:28 pm
(@rampage)
Posts: 354
Reputable Member
Topic starter
 

the system is a windows server 2003 SP2, so i'm assuming it's IIS6

 
Posted : 04/09/2014 7:22 pm
Share: