|
iisext.vbs
|
IIS Web service extension scriptConfigures and manages Web service extensions, applications, and individual files on servers running Windows Server 2003 with Internet Information Services (IIS) 6.0. Administrators can use this script to enable and list applications; add and remove application dependencies; enable, disable, and list Web service extensions; and add, remove, enable, disable, and list individual files.
To view the command syntax, click a command:
iisext /enapp
Enables a specific application in the ApplicationDependencies metabase property.
Syntax
iisext[.vbs] /enapp Application [/s Computer [/u [Domain\]User [/p Password]]]
Parameters
Application
Required. Specifies the name of the application to be enabled.
/s Computer
Runs the script on the specified remote computer. Type the computer name or IP address without backslashes. By default, the script runs on the local computer.
/u [Domain\]User
Runs the script with the permissions of the specified user account. This account must be a member of the Administrators group on the remote computer. By default, the script runs with the permissions of the current user of the local computer.
/p Password
Specifies the password of the user account specified in the /u parameter. If you omit this parameter, the script prompts you for the password and obscures the text you type.
Remarks
To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.
This operation applies to entries in the ApplicationDependencies metabase property and is used to manage the Web service extensions an application depends upon. A Web service extension is any combination of CGI or ISAPI files that extend IIS functionality.
An application must have at least one preexisting dependency in the ApplicationDependencies metabase property in order to be enabled.
Examples
The following examples show how to use iisext /enapp in specific situations.
To enable an application on a local computer
The following command enables the application "Payroll" on the local computer:
iisext /enapp Payroll
In response, iisext displays the following:
Connecting to server ...Done.
Enabling application complete.
To enable an application on a remote computer
The following command enables the application "TravelPlans" on a remote computer:
iisext /enapp TravelPlans /s RemoteComputer /u Manager /p Pa$$Werd
In response, iisext displays the following:
Connecting to server ...Done.
Enabling application complete.
iisext /listapp
Lists applications in the ApplicationDependencies metabase property.
Syntax
iisext[.vbs] /listapp [/s Computer [/u [Domain\]User [/p Password]]]
Parameters
/s Computer
Runs the script on the specified remote computer. Type the computer name or IP address without backslashes. By default, the script runs on the local computer.
/u [Domain\]User
Runs the script with the permissions of the specified user account. This account must be a member of the Administrators group on the remote computer. By default, the script runs with the permissions of the current user of the local computer.
/p Password
Specifies the password of the user account specified in the /u parameter. If you omit this parameter, the script prompts you for the password and obscures the text you type.
Remarks
To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.
This operation applies to entries in the ApplicationDependencies metabase property and is used to manage the Web service extensions an application depends upon. A Web service extension is any combination of CGI or ISAPI files that extend IIS functionality.
An application must have at least one preexisting dependency in the ApplicationDependencies metabase property in order to be listed.
Examples
The following examples show how to use iisext /listapp in specific situations.
To list applications in the ApplicationDependencies property on a local computer
The following command lists all of the applications that are in the ApplicationDependencies list of the metabase on the local computer:
iisext /listapp
In response, iisext displays all of the applications accessible from ApplicationDependencies on the local computer.
Connecting to server ...Done
Active Server Pages
Internet Data Connector
Server Side Includes
WebDAV
Payroll
TravelPlans
To list applications in the ApplicationDependencies property on a remote computer
The following command displays all of the applications accessible from ApplicationDependencies on a remote computer.
iisext /listapp /s RemoteComputer /u Manager /p Pa$$Werd
In response, iisext displays all of the applications available on the remote computer.
Connecting to server ...Done
Active Server Pages
Internet Data Connector
Server Side Includes
WebDAV
Payroll
TravelPlans
iisext /adddep, /remdep
Adds or removes a dependency between an application and one or more Web service extensions.
Syntax
iisext[.vbs] {/addep | /rmdep} Application ID [ID...] [/s Computer [/u [Domain\]User [/p Password]]]
Parameters
Application
Required. Specifies the name of the application that is dependent on one or more Web service extensions.
ID
Required. Specifies the ID of the Web service extension upon which the application is dependent. Additional dependencies are optional.
/s Computer
Runs the script on the specified remote computer. Type the computer name or IP address without backslashes. By default, the script runs on the local computer.
/u [Domain\]User
Runs the script with the permissions of the specified user account. This account must be a member of the Administrators group on the remote computer. By default, the script runs with the permissions of the current user of the local computer.
/p Password
Specifies the password of the user account specified in the /u parameter. If you omit this parameter, the script prompts you for the password and obscures the text you type.
Remarks
To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.
This operation applies to entries in the ApplicationDependencies metabase property and is used to manage the Web service extensions an application depends upon. A Web service extension is any combination of CGI or ISAPI files that extend IIS functionality.
If the application does not exist in the ApplicationDependencies property, iisext will create it.
Examples
The following examples show how to use iisext /adddep, /rmdep in specific situations.
To add application dependencies on a local computer
The following command makes the application "Payroll" dependent on the Web service extension "timesheet" on the local computer. In this example, the files that are required for the Web service extension "timesheet" were previously added to and enabled on the local computer.
iisext /adddep Payroll timesheet
In response, iisext displays the following:
Connecting to server ...Done.
Adding dependency complete.
To remove multiple application dependencies from an application on a remote computer
The following command removes the dependency of the application "TravelPlans" on the Web service extensions "FlightSchedules" and "HotelRooms" on a remote computer:
iisext /rmdep TravelPlans FlightSchedules HotelRooms /s RemoteComputer /u Manager /p Pa$$Werd
In response, iisext displays the following:
Connecting to server ...Done.
Removing dependency complete.
iisext /enext, /disext
Enables or disables a Web service extension with a specific Web service extension ID.
Syntax
iisext[.vbs] {/enext | /disext} ID [/s Computer [/u [Domain\]User [/p Password]]]
Parameters
ID
Required. Specifies the ID of the Web service extension to be enabled or disabled.
/s Computer
Runs the script on the specified remote computer. Type the computer name or IP address without backslashes. By default, the script runs on the local computer.
/u [Domain\]User
Runs the script with the permissions of the specified user account. This account must be a member of the Administrators group on the remote computer. By default, the script runs with the permissions of the current user of the local computer.
/p Password
Specifies the password of the user account specified in the /u parameter. If you omit this parameter, the script prompts you for the password and obscures the text you type.
Remarks
To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.
This operation applies to groups of entries that have the same Web service ID in WebSvcExtRestrictionList property of the metabase. The operation sets the Access flag to 1 (Allow) or 0 (Deny) on each of the ISAPIRestrictions or CGIRestrictions properties for that ID.
A Web service extension is any combination of CGI or ISAPI files that extend IIS functionality.
This operation can only be performed on one Web service extension at a time.
Examples
The following examples show how to use iisext /enext, /disext in specific situations.
To enable a Web service extension on a local computer
The following command enables the Web service extension "Payroll" on the local computer:
iisext /enext Payroll
In response, iisext displays the following:
Connecting to server ...Done.
Enabling extension complete.
To disable a Web service extension on a remote computer
The following command disables the Web service extension "PassengerList" on a remote computer:
iisext /disext PassengerList /s RemoteComputer /u Manager /p Pa$$Werd
In response, iisext displays the following:
Connecting to server ...Done.
Disabling extension complete.
iisext /listext
Lists Web service extension IDs for all defined Web service extensions. If there are multiple entries with the same ID, the Web service extension is only listed once.
Syntax
iisext[.vbs] /listext [/s Computer [/u [Domain\]User [/p Password]]]
Parameters
/s Computer
Runs the script on the specified remote computer. Type the computer name or IP address without backslashes. By default, the script runs on the local computer.
/u [Domain\]User
Runs the script with the permissions of the specified user account. This account must be a member of the Administrators group on the remote computer. By default, the script runs with the permissions of the current user of the local computer.
/p Password
Specifies the password of the user account specified in the /u parameter. If you omit this parameter, the script prompts you for the password and obscures the text you type.
Remarks
To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.
This operation applies to entries in the WebSvcExtRestrictionList metabase property and is used to manage the Web service extensions an application depends upon. A Web service extension is any combination of CGI or ISAPI files that extend IIS functionality.
Examples
The following examples show how to use iisext /listext in specific situations.
To list Web service extension IDs in the WebSvcExtRestrictionList property on a local computer
The following command lists all of the Web service extension IDs that are in the WebSvcExtRestrictionList property of the metabase on the local computer:
iisext /listext
In response, iisext displays all of the Web service extension IDs that are on the local computer.
Connecting to server ...Done
SSINC
Payroll
ASP
Inventory
ASP.NET
WEBDAV
HTTPODBC
To list Web service extension IDs in the WebSvcExtRestrictionList property on a remote computer
The following command lists all of the Web service extension IDs that are in the WebSvcExtRestrictionList property of the metabase on a remote computer:
iisext /listext /s RemoteComputer /u Manager /p Pa$$Werd
In response, iisext displays all of the Web service extension IDs that are on the remote computer.
Connecting to server ...Done
Payroll
Inventory
ASP.NET
WEBDAV
iisext /addfile
Adds a single file to the Web service extension restriction list (WebSvcExtRestrictionList) property in the metabase.
Syntax
iisext[.vbs] /addfile Path\FileName Access {0 | 1} ID Deletable {0 | 1} ShortDesc [/s Computer [/u [Domain\]User [/p Password]]]
Parameters
Path\FileName
Required. Specifies the file name and path of the Web service extension entry to be added.
Access {0 | 1}
Required. Numeric designation of whether the file is disabled (0) or enabled(1) after it is added.
ID
Required. Specifies the ID of the Web service extension associated with the file. If the ID does not exist, iisext will create it.
Deletable {0 | 1}
Required. Numeric designation of whether the entry can be deleted from the Web service extension restriction list using iisext or IIS Manager. Set to 0 to prevent the entry from being deleted or 1 to allow it to be deleted.
ShortDesc
Required. A short description of the Web service extension associated with the entry. This text can be localized and should be the same for all entries associated with the same Web service extension.
/s Computer
Runs the script on the specified remote computer. Type the computer name or IP address without backslashes. By default, the script runs on the local computer.
/u [Domain\]User
Runs the script with the permissions of the specified user account. This account must be a member of the Administrators group on the remote computer. By default, the script runs with the permissions of the current user of the local computer.
/p Password
Specifies the password of the user account specified in the /u parameter. If you omit this parameter, the script prompts you for the password and obscures the text you type.
/addfile /?
Displays help at the command prompt.
Remarks
To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.
This operation applies to entries in the WebSvcExtRestrictionList metabase property and is used to manage the Web service extensions an application depends upon. A Web service extension is any combination of CGI or ISAPI files that extend IIS functionality.
Path\FileName can include special cases such as *.dll to enable/didisablenlisted ISAPI files and *.exe to enable/disable unlisted CGI files.
Examples
The following examples show how to use iisext /addfile in specific situations.
To add a Web service extension file as an entry in the WebSvcExtRestrictionList on the local computer
The following command adds the file Timesheet.exe as an entry in the Web service extension restriction list (WebSvcExtRestrictionList) on the local computer. The Access flag is set to 0 to disable the entry on startup, The ID identifies the associated Web service extension as Payroll, and the Deletable flag is set to 1 to allow the entry to be deleted from the Web service extension restriction list if necessary.
iisext /AddFile c:\Source\Timesheet.exe 0 Payroll 1 Payroll
In response, iisext displays the following.
Connecting to server ...Done.
Adding extension file complete.
To add a Web service extension file as an entry in the WebSvcExtRestrictionList on a remote computer
The following command adds the file Payscale.dll as an entry in the Web service extension restriction list (WebSvcExtRestrictionList) on a remote computer. The Access flag is set to 1 to enable the entry on startup, The ID identifies the associated Web service extension as Payroll, and the Deletable flag is set to 0 to prevent the entry from being deleted from the Web service extension restriction list.
iisext /AddFile c:\Source\Payscale.dll 1 Payroll 0 Payroll /s RemoteComputer /u Manager /p Pa$$Werd
In response, iisext displays the following.
Connecting to server ...Done.
Adding extension file complete.
iisext /enfile, /disfile, /rmfile
Enables, disables, or removes a specific Web service extension file in the Web service extension restriction list (WebSvcExtRestrictionList) property.
Syntax
iisext[.vbs] {/enfile | /disfile | /rmfile} [Path\]FileName [/s Computer [/u [Domain\]User [/p Password]]]
Parameters
[Path\]FileName
Required. Specifies the file to be enabled, disabled, or removed.
/s Computer
Runs the script on the specified remote computer. Type the computer name or IP address without backslashes. By default, the script runs on the local computer.
/u [Domain\]User
Runs the script with the permissions of the specified user account. This account must be a member of the Administrators group on the remote computer. By default, the script runs with the permissions of the current user of the local computer.
/p Password
Specifies the password of the user account specified in the /u parameter. If you omit this parameter, the script prompts you for the password and obscures the text you type.
Remarks
To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.
This operation applies to entries in WebSvcExtRestrictionList property of the metabase. The operation sets the Access flag to 1 (Allow) or 0 (Deny) on each of the ISAPIRestrictions or CGIRestrictions properties for that file entry.
If a \rmfile operation is performed on a file flagged as not deletable, iisext returns an error.
A Web service extension is any combination of CGI or ISAPI files that extend IIS functionality.
This operation can only be performed on one Web service extension file at a time.
Examples
The following examples show how to use iisext /enfile, /disfile, or /rmfile in specific situations.
To enable a Web service extension file on a local computer
The following command enables the file "Timesheet.exe" in the WebSvcExtRestrictionList property of the metabase on the local computer:
iisext /enfile c:\Source\Timesheet.exe
In response, iisext displays the following:
Connecting to server ...Done.
Enabling extension file complete.
To disable a Web service extension file on a remote computer
The following command disables the file "Taxes.dll" in the WebSvcExtRestrictionList property of the metabase on a remote computer:
iisext /disfile c:\Source\Taxes.dll /s RemoteComputer /u Manager /p Pa$$Werd
In response, iisext displays the following:
Connecting to server ...Done.
Disabling extension file complete.
To remove a Web service extension file on a remote computer
The following command removes the file "HourlyRate.dll" in the WebSvcExtRestrictionList property of the metabase on a remote computer:
iisext /rmfile c:\Source\HourlyRate.dll /s RemoteComputer /u Manager /p Pa$$Werd
In response, iisext displays the following:
Connecting to server ...Done.
Removing extension file complete.
iisext /listfile
Lists Web service extension files for all defined Web service extensions.
Syntax
iisext[.vbs] /listfile [/s Computer [/u [Domain\]User [/p Password]]]
Parameters
/s Computer
Runs the script on the specified remote computer. Type the computer name or IP address without backslashes. By default, the script runs on the local computer.
/u [Domain\]User
Runs the script with the permissions of the specified user account. This account must be a member of the Administrators group on the remote computer. By default, the script runs with the permissions of the current user of the local computer.
/p Password
Specifies the password of the user account specified in the /u parameter. If you omit this parameter, the script prompts you for the password and obscures the text you type.
Remarks
To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.
This operation applies to entries in the WebSvcExtRestrictionList metabase property and is used to manage the Web service extensions an application depends upon. A Web service extension is any combination of CGI or ISAPI files that extend IIS functionality.
Examples
The following examples show how to use iisext /listfile in specific situations.
To list Web service extension files in the WebSvcExtRestrictionList property on a local computer
The following command lists all of the Web service extension files that are in the WebSvcExtRestrictionList property of the metabase on the local computer:
iisext /ListFile
In response, iisext displays all of the Web service extension files that are on the local computer.
Connecting to server ...Done
E:\Windows\system32\inetsrv\asp.dll
E:\Windows\system32\inetsrv\httpodbc.dll
E:\Windows\system32\inetsrv\ssinc.dll
E:\Windows\system32\inetsrv\httpext.dll
E:\Windows\system32\Microsoft.NET\Framework\v1.0.3705\aspnet_isapi.dll
c:\Source\Taxes.dll
c:\Source\Accounting.dll
c:\Source\Taxes.exe
c:\Source\Timesheet.exe
c:\Source\Payscale.dll
Remarks
The /u and /p command-line options are available only when you use /s. You must use /p with /u to provide the user's password.
Iisext.vbs performs the same operations that are available from IIS Manager. You can use either tool to administer IIS Web sites.
The computer issuing the command must be running Windows XP or a Windows Server 2003 operating system. The user must be a member of the Administrators group on any computer that the command affects.
The computer that the command affects must be a server running Windows Server 2003 with Internet Information Services (IIS) 6.0
