Upgrade IIS 1

[CrimeScene]

Hello.

I wish to upgrade IIS on my Win2003 server.

(1) Would someone kindly provide the Microsoft URL where this upgrade can be obtained? I expect to find a physical download link, not links to articles and books for sale!

(2) How difficult is this process? While this server doesn't currently host a website, I do utilize Active Directory (clients log into this domain server) as well as use the Raid drives as a file server.

Thanks!

 

[CrimeScene]

Per item (1), I meant to say that I cannot locate any download link on Microsoft's website .. all I find are references and links to books they want you to buy.

Where can I download the latest IIS from?!!

Thank you!

 

[snootalope]

If your using Windows 2003, your using the latest version of IIS. That's 6.0 on there! Any kind of updates and patches would be dowloaded via the microsoft update page.. which you get to by using Tools, Windows Update in Internet Explorer..

snoots

 

[CrimeScene]

Negative, snoots.

I attempted to install Software Update Services (SUS) and it prompted me that IIS was at a prior version. However, I cannot recall what version that my server is on).

On that note, where may I access IIS information on my 2003 server ... to see the version number as well as other configuration info?

For those who are not familiar with SUS:

http://www.microsoft.com/windowsserversystem/sus/default.mspx

Additional info resource:

http://www.susserver.com/

SUS excerpt:
Microsoft Software Update Services (SUS) enables administrators to quickly and reliably deploy the latest critical updates and security updates to Windows® 2000 and Windows Server™ 2003-based servers, as well as to desktop computers running Windows 2000 Professional or Windows XP Professional. As part of the Microsoft Dynamic Systems Initiative (DSI), SUS helps provide core server manageability for Windows Server 2003.

SUS now provides Windows service packs (SPs), in addition to critical and security updates. SUS will deliver Windows XP SP1, Windows 2000 SP4, and all future service packs for Windows 2000, Windows XP, and the Windows Server 2003 family of products.

 

[snootalope]

Just go to the Administrative Tools again in the control panel and open the Internet Informations Services Manager. Once you got that open, you'll see your version in the right hand pane..

If your using Windows 2003, your using IIS 6.0 If it says 5.0, then i beg to differ on you running 2003..

snoots

BTW: SUS is pretty sweet..

 

[CrimeScene]

Hmmm, I don't have an item labeled "IIS" or the like. Perhaps it's not active, as I do know that 2003 Server ships with this feature inactive/disabled.

Any advice from this point? I definitely want to utilize SUS.

 

[snootalope]

LOL you have to install it!

Go to Add/Remove programs and hit "Windows Compnents" down the right side...

A box comes up and you have to put a check in the "Application Server" box and hit Details at the bottom right and make sure there is a check beside Internet Information Server

Then hit next WITH YOUR WINDOWS CD IN THE DRIVE and it'll install.. that should help!

snoots

 

[CrimeScene]

Snoot, that part I knew already! But I was aking more about what safeguards I should consider before installing/activating IIS on this server. I can't afford to create chaos!

 

[CrimeScene]

In addition to my prior reply, what options should I enable along with IIS:

Application Server Console
ASP.NET
Enable Network .COM access (was automatically checked)
Enable Network DTC access
IIS (I checkmarked this)
Message Queuing

Thank you!

 

[snootalope]

Just use the defaults if your wanting to use this server as an SUS server..

 

[CrimeScene]

Snoot,

Thanks for the great advice. Currently, I've installed Application Server (IIS with other defaults), and have installed SUS which is now performing a large (125mb) synchronization with the Windows Update Server.

Since you have experience with SUS, how can I get the client computers to automatically sync / fetch updates from my server? SUS informed me the URL is simply

http://MYDOMAINSERVER,

but I can't figure out where to instruct the client computers to fetch from this address in lieu of the windowsupdate.microsoft.com

I know that the IEAK (internet explorer administration kit) can set this, but I'd rather not have to rollout a customized IE to all clients.

Lastly, what O/S will SUS deploy updates to? Better said, what O/S will it NOT deply to? I believe I read somewhere that it only works with XP and 2000 clients.

Thanks, snoots!

 

[CrimeScene]

Per my prior post ...
Excerpt:
“Microsoft Software Update Services (SUS) now provides Windows service packs (SPs), in addition to critical and security updates.SUS will deliver Windows XP SP1, Windows 2000 SP4, and all future service packs for Windows 2000, Windows XP, and the Windows Server™ 2003 family of products.”

 

[CrimeScene]

Snoots, I located the following on the server:

In the Group Policy Object Editor,
Under Computer Configuration, Administrative Templates, Windows Components, Windows Update

...there appears to be settings (currently disabled) that dictate where computers are to retrieve updates.

Is this where I would designate my "sus server" url? If so, does this only affect computers that authenticate to my domain server?

Right or wrong, please elaborate and redirect me as necessary!

Thanks, snoots.

 

[CrimeScene]

What happened, snoots? Did you quit on me already?!

 

[CrimeScene]

Oh, well, perhaps snoots doesn't know this part. But I am grateful for his previous insight. I've got SUS installed and actively pulling updates from the web. I've also got my domain computers now synchronizing with the SUS server, thanks to Active Directory.

Here are some links that provide the how-to for configuring Automatic Update (AU) Clients to utilize the SUS server.

I've seen some references (e.g. susserver.com) that suggest editing the registry of each client computer. Great if you only have a few, but that won't fly in a corporate environment. Thankfully, you can use an Active Directory Group Policy to configure AU clients. This Group Policy setting (located in Computer Configuration\Administrative Templates\Windows Components\Windows Update) specifies whether a domain computer receives security updates and other important downloads through Automatic Updates. When enabled, it also specifies the download and installation behavior, just like the user options in the local computer's Control Panel.

An easy-to-follow document can be downloaded here:

http://www.microsoft.com/windowsserversystem/sus/susoverview.mspx

A more intense guide can be found here:

http://www.microsoft.com/technet/security/guidance/secmod198.mspx

===================
Other related links
===================
(1) How to Force Automatic Updates 2.2 to Perform a Detection Cycle:

http://support.microsoft.com/default.aspx?scid=kb;en-us;326693

(2) For older O/S, download the Automatic Update Client:

http://www.microsoft.com/windows2000/downloads/recommended/susclient/default.asp

(3) Guide (parts 1 and 2):

http://www.microsoft.com/technet/security/tools/sadsus1.asp

 

[CrimeScene]

Hello again,

BACKGROUND:
I have successfully installed my SUS server and it is fetching updates from the windows update server. I know this by looking at the SUS Admin console which has shown (1) new updates requiring approval and (2) success messages in the Synchronization Log. I have synchronization set to run daily at 4am.

I have also configured Group Policy to enforce Auto Updates on my clients that log into our domain server, understanding that SUS only applies to XP, 2k and 2k3 systems. I know that my GP policy is in effect as my client's System Properties / Auto Update features are grayed-out and preset to Auto Install at 5am.

ISSUE:
I have mixed results at my XP clients, or at least I think I do. I haven't been able to locate any definitive resources on the web that discuss - in detail - how one can be assured that clients are actually being updated. If anyone would be willing to share ideas on this, it would be appreciated.

Here's the contents from MY computer's %windir%\Windows Update.log From what I can tell, it looks like it ran successfully. My user account has administrator rights locally:

--------------------
2004-02-25 07:01:12 12:01:12 Success IUCTL Starting
2004-02-25 07:01:12 12:01:12 Success IUCTL Downloaded iuident.cab from

http://kingsus

to C:\Program Files\WindowsUpdate\V4
2004-02-25 07:01:12 12:01:12 Success IUENGINE Starting
2004-02-25 07:01:12 12:01:12 Success IUENGINE Determining machine configuration
2004-02-25 07:01:14 12:01:14 Success IUENGINE Querying software update catalog from

http://kingsus/autoupdate/getmanifest.asp

2004-02-25 07:01:14 12:01:14 Success IUENGINE Determining machine configuration
2004-02-25 07:01:14 12:01:14 Success IUENGINE Querying software update catalog from

http://kingsus/autoupdate/getmanifest.asp

2004-02-25 07:01:14 12:01:14 Success IUENGINE Determining machine configuration
2004-02-25 07:01:14 12:01:14 Success IUENGINE Querying software update catalog from

http://kingsus/autoupdate/getmanifest.asp

2004-02-25 07:01:15 12:01:15 Success IUENGINE Determining machine configuration
2004-02-25 07:01:15 12:01:15 Error IUENGINE Querying software update catalog from

http://kingsus/autoupdatedrivers/getmanifest.asp

(Error 0x80190194)
2004-02-25 07:01:15 12:01:15 Success IUENGINE Shutting down
2004-02-25 07:01:15 12:01:15 Success IUCTL Shutting down
--------------------

However, here's the log from an XP client that consistently shows errors. The client-user account has power-user rights locally, although it still produced the same errors when set to administrator rights locally:

--------------------
2004-02-25 14:01:23 19:01:23 Success IUCTL Starting
2004-02-25 14:01:23 19:01:23 Success IUCTL Downloaded iuident.cab from

http://kingsus

to C:\Program Files\WindowsUpdate\V4
2004-02-25 14:01:23 19:01:23 Success IUENGINE Starting
2004-02-25 14:01:23 19:01:23 Error IUENGINE Library download error. Will retry. (Error 0x80190193)
2004-02-25 14:01:23 19:01:23 Error IUENGINE Library download error. Will retry. (Error 0x80190193)
2004-02-25 14:01:23 19:01:23 Error IUENGINE Library download error. Will retry. (Error 0x80190193)
2004-02-25 14:01:23 19:01:23 Success IUENGINE Determining machine configuration
2004-02-25 14:01:23 19:01:23 Success IUENGINE Querying software update catalog from

http://kingsus/autoupdate/getmanifest.asp

2004-02-25 14:01:23 19:01:23 Success IUENGINE Determining machine configuration
2004-02-25 14:01:23 19:01:23 Success IUENGINE Querying software update catalog from

http://kingsus/autoupdate/getmanifest.asp

2004-02-25 14:01:23 19:01:23 Success IUENGINE Determining machine configuration
2004-02-25 14:01:24 19:01:24 Success IUENGINE Querying software update catalog from

http://kingsus/autoupdate/getmanifest.asp

2004-02-25 14:01:25 19:01:25 Success IUENGINE Determining machine configuration
2004-02-25 14:01:25 19:01:25 Error IUENGINE Querying software update catalog from

http://kingsus/autoupdatedrivers/getmanifest.asp

(Error 0x80190194)
2004-02-25 14:01:25 19:01:25 Success IUENGINE Shutting down
2004-02-25 14:01:25 19:01:25 Success IUCTL Shutting down
--------------------

I understand that the "

http://kingsus/autoupdatedrivers/getmanifest.asp"

will always produce an error since SUS cannot deliver drivers. That part isn't a concern for me.

The error "(Error 0x80190193)" states (at susserver.com) that the IIS webserver has no default page defined. This is untrue, as an index.html page does exist -and- is accessible from all of my clients upon browsing to

http://kingsus.

**UPDATE: My file was originally named "index.html", but when looking at IIS Manager, Web Sites, autoupdate properties, Documents tab, that name was not listed under Enable Default Content Page. I have since renamed my file to "index.htm" in lieu of adding my original filename to this list. However, this did not resolve the issue.

Per my IIS settings, do I need to install BITS Server Extensions? When I installed IIS for the purposes of utilizing SUS, I merely took the defaults by checking "Application Server" in the Windows Components Wizard window. This installed Application Server Console, COM+ access and IIS.

Here's the current IIS log data, as found on the server in folder "C:\WINDOWS\system32\LogFiles\W3SVC1". As you can see, these two clients are communicating with the server / IIS. Obviously, I've hidden any IP addresses from this post:

---------------------------
ENTRIES RELATED TO MY COMPUTER (whose "%windir%\Windows Update.log" appears to report success):
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2004-02-25 11:55:47
#Fields: date time s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs-host sc-status sc-substatus sc-win32-status
2004-02-25 11:55:47 KINGSUS [MyServerIP] HEAD /iuident.cab 0402251201 80 - [MyClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 11:55:47 KINGSUS [MyServerIP] GET /iuident.cab 0402251201 80 - [MyClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 11:55:47 KINGSUS [MyServerIP] HEAD /selfupdate/AU/x86/XP/en/wuaucomp.cab 0402251201 80 - [MyClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 11:55:47 KINGSUS [MyServerIP] GET /selfupdate/AU/x86/XP/en/wuaucomp.cab 0402251201 80 - [MyClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 11:55:47 KINGSUS [MyServerIP] HEAD /iuident.cab 0402251201 80 - [MyClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 11:55:47 KINGSUS [MyServerIP] GET /wutrack.bin V=2&U=c48c5d529c5c42479396b231b73d50c0&C=iu&A=n&I=&D=&P=5.1.a28.2.100.1.0&L=en-US&S=s&E=00000000&M=&X=040225120112656 80 - [MyClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 11:55:49 KINGSUS [MyServerIP] POST /autoupdate/getmanifest.asp - 80 - [MyClientIP] Mozilla/4.0+(compatible;+Win32;+WinHttp.WinHttpRequest.5) kingsus 200 0 0
2004-02-25 11:55:49 KINGSUS [MyServerIP] POST /autoupdate/getmanifest.asp - 80 - [MyClientIP] Mozilla/4.0+(compatible;+Win32;+WinHttp.WinHttpRequest.5) kingsus 200 0 0
2004-02-25 11:55:49 KINGSUS [MyServerIP] POST /autoupdate/getmanifest.asp - 80 - [MyClientIP] Mozilla/4.0+(compatible;+Win32;+WinHttp.WinHttpRequest.5) kingsus 200 0 0
2004-02-25 11:55:50 KINGSUS [MyServerIP] GET /wutrack.bin V=2&U=c48c5d529c5c42479396b231b73d50c0&C=au&A=d&I=&D=&P=5.1.a28.2.100.1.0&L=en-US&S=s&E=00000000&M=items%3D0&X=040225120115500 80 - [MyClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 11:55:50 KINGSUS [MyServerIP] POST /autoupdatedrivers/getmanifest.asp |-|0|404_Not_Found 80 - [MyClientIP] Mozilla/4.0+(compatible;+Win32;+WinHttp.WinHttpRequest.5) kingsus 404 0 0

-------------------------
ENTRIES RELATED TO THE OTHER CLIENT COMPUTER DISCUSSED (whose "%windir%\Windows Update.log" reports failure):
2004-02-25 18:58:08 KINGSUS [MyServerIP] HEAD /iuident.cab 0402251901 80 - [OtherClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 18:58:08 KINGSUS [MyServerIP] GET /iuident.cab 0402251901 80 - [OtherClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 18:58:08 KINGSUS [MyServerIP] HEAD /selfupdate/AU/x86/XP/en/wuaucomp.cab 0402251901 80 - [OtherClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 18:58:08 KINGSUS [MyServerIP] GET /selfupdate/AU/x86/XP/en/wuaucomp.cab 0402251901 80 - [OtherClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 18:58:08 KINGSUS [MyServerIP] HEAD /iuident.cab 0402251901 80 - [OtherClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 18:58:08 KINGSUS [MyServerIP] GET /wutrack.bin V=2&U=85f94d534e32a348b0774e04e2c22a42&C=iu&A=n&I=&D=&P=5.1.a28.2.100.1.0&L=en-US&S=s&E=00000000&M=&X=040225190123065 80 - [OtherClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 18:58:08 KINGSUS [MyServerIP] POST /autoupdate/getmanifest.asp - 80 - [OtherClientIP] Mozilla/4.0+(compatible;+Win32;+WinHttp.WinHttpRequest.5) kingsus 200 0 0
2004-02-25 18:58:08 KINGSUS [MyServerIP] POST /autoupdate/getmanifest.asp - 80 - [OtherClientIP] Mozilla/4.0+(compatible;+Win32;+WinHttp.WinHttpRequest.5) kingsus 200 0 0
2004-02-25 18:58:09 KINGSUS [MyServerIP] POST /autoupdate/getmanifest.asp - 80 - [OtherClientIP] Mozilla/4.0+(compatible;+Win32;+WinHttp.WinHttpRequest.5) kingsus 200 0 0
2004-02-25 18:58:09 KINGSUS [MyServerIP] GET /wutrack.bin V=2&U=85f94d534e32a348b0774e04e2c22a42&C=au&A=d&I=&D=&P=5.1.a28.2.100.1.0&L=en-US&S=s&E=00000000&M=items%3D0&X=040225190124705 80 - [OtherClientIP] Industry+Update+Control kingsus 200 0 0
2004-02-25 18:58:10 KINGSUS [MyServerIP] POST /autoupdatedrivers/getmanifest.asp |-|0|404_Not_Found 80 - [OtherClientIP] Mozilla/4.0+(compatible;+Win32;+WinHttp.WinHttpRequest.5) kingsus 404 0 0
---------------------------

I've also looked at the "C:\Program Files\WindowsUpdate\V4\iuhist.xml" file for downloaded updates, but I don't believe it specifies from where it pulled each update (windows update server versus my SUS server).

If I've failed to disclose any other settings, please ask.

Thanks in advance for any insight.