IP address restrictions can be used to allow or deny access to your site by clients that have a specific IP address, have an IP address within a range of addresses, or have a specific DNS domain name. This opens the following dialog, which by default does not restrict access to your site:.

The main thing to watch for here is that denying access based on domain name involves reverse DNS lookups each time clients try to connect to your web site, and this can significantly impact the performance of your site. The final way of controlling access to your sites is to use the Authentication Methods dialog box we looked at previously:.

Since web sites are prime targets for attackers, you probably want to log hits to your site to see who's visiting it. By default IIS 6 logs traffic to all content as can be seen on the bottom of the General tab of the properties for a web site or virtual directory:. The default logging format is the W3C Extended Log File Format, and clicking Properties indicates new log files are created daily in the indicated directory.

It's a good idea to specify that local time be used for logging traffic as this makes it easier to interpret the logs:. The key of course is to review log files regularly to look for suspicious activity.

You can download these tools here. Sometimes you need to take your web site down for maintenance, and in such cases it's a good idea to redirect all client traffic directed to your site to an alternate site or page informing users what's going on.

IIS lets you redirect a web site to a different file or folder on the same or another web site or even to an URL on the Internet. To configure redirection you use the Home Directory tab and choose the redirection option you want to use:. Finally, if sites become available you may need to restart IIS to get them working again. Restarting IIS is a last resort as any users currently connected will be disconnected and any data stored in memory by IIS applications will be lost. And you can stop or start individual IIS services using the net commands, for example net stop w3svc will stop the WWW services only.

In this article I've explained how to create and configure web sites and virtual directories on IIS 6. Most of what we've covered also applies to IIS 5 on Windows as well. He has written more than a thousand articles and has authored or been series editor for over 50 books for Microsoft Press and other publishers. He currently runs an IT content development business in Winnipeg, Canada. Your email address will not be published. Learn about the latest security threats, system optimization tricks, and the hottest new technologies in the industry.

Over 1,, fellow IT Pros are already on-board, don't be left out! This provides better security. In the Authentication Methods dialog box, check the Digest authentication for Windows domain servers checkbox.

A window message dialog will open to inform you that Digest authentication works with Active Directory domain accounts and asks if you wish to continue. Click Yes. Realm is a security boundary which allows user authentication within that boundary. If the user moves to other realm boundary then they need to re-authenticate to access.

Realm feature provides greater security to Web server. This is a new security feature in IIS 6. This provides highly secure or lockdown mode. On the right pane, a list of web service extensions and the status Prohibited or Allowed for each are shown.

Based on your requirement, select a Web Service Extension name which is Prohibited, right click and select Allow to enable. Participation is optional. Pearson collects name, contact information and other information specified on the entry form for the contest or drawing to conduct the contest or drawing. Pearson may collect additional personal information from the winners of a contest or drawing in order to award the prize and for tax reporting purposes, as required by law.

If you have elected to receive email newsletters or promotional mailings and special offers but want to unsubscribe, simply email information informit.

On rare occasions it is necessary to send out a strictly service related announcement. For instance, if our service is temporarily suspended for maintenance we might send users an email. Generally, users may not opt-out of these communications, though they can deactivate their account information. However, these communications are not promotional in nature. We communicate with users on a regular basis to provide requested services and in regard to issues relating to their account we reply via email or phone in accordance with the users' wishes when a user submits their information through our Contact Us form.

Pearson automatically collects log data to help ensure the delivery, availability and security of this site. We use this information for support purposes and to monitor the health of the site, identify problems, improve service, detect unauthorized access and fraudulent activity, prevent and respond to security incidents and appropriately scale computing resources.

Pearson may use third party web trend analytical services, including Google Analytics, to collect visitor information, such as IP addresses, browser types, referring pages, pages visited and time spent on a particular site. While these analytical services collect and report information on an anonymous basis, they may use cookies to gather web trend information.

The information gathered may enable Pearson but not the third party web trend services to link information with application and system log data.

Pearson uses this information for system administration and to identify problems, improve service, detect unauthorized access and fraudulent activity, prevent and respond to security incidents, appropriately scale computing resources and otherwise support and deliver this site and its services.

This site uses cookies and similar technologies to personalize content, measure traffic patterns, control security, track use and access of information on this site, and provide interest-based messages and advertising.

Users can manage and block the use of cookies through their browser. Disabling or blocking certain cookies may limit the functionality of this site. Pearson uses appropriate physical, administrative and technical security measures to protect personal information from unauthorized access, use and disclosure.

Pearson may provide personal information to a third party service provider on a restricted basis to provide marketing solely on behalf of Pearson or an affiliate or customer for whom Pearson is a service provider. Marketing preferences may be changed at any time. If a user's personally identifiable information changes such as your postal address or email address , we provide a way to correct or update that user's personal data provided to us. This can be done on the Account page. If a user no longer desires our service and desires to delete his or her account, please contact us at customer-service informit.

Users can always make an informed choice as to whether they should proceed with certain services offered by InformIT. If you choose to remove yourself from our mailing list s simply visit the following page and uncheck any communication you no longer want to receive: www.

While Pearson does not sell personal information, as defined in Nevada law, Nevada residents may email a request for no sale of their personal information to NevadaDesignatedRequest pearson.

California residents should read our Supplemental privacy statement for California residents in conjunction with this Privacy Notice. The Supplemental privacy statement for California residents explains Pearson's commitment to comply with California law and applies to personal information of California residents collected in connection with this site and the Services.

This web site contains links to other sites. Please be aware that we are not responsible for the privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of each and every web site that collects Personal Information.

This privacy statement applies solely to information collected by this web site. Please contact us about this Privacy Notice or if you have any requests or questions relating to the privacy of your personal information. We may revise this Privacy Notice through an updated posting. We will identify the effective date of the revision in the posting.

Often, updates are made to provide greater clarity or to comply with changes in regulatory requirements. If the updates involve material changes to the collection, protection, use or disclosure of Personal Information, Pearson will provide notice of the change through a conspicuous notice on this site or other appropriate way. Continued use of the site after the effective date of a posted revision evidences acceptance. Please contact us if you have questions or concerns about the Privacy Notice or any objection to any revisions.

This chapter covers the wealth of tools and options available to administrators in Windows Server , including many enhancements to tools that existed in previous versions of the system. This chapter is from the book. The default level of encryption for remote sessions The default level of encryption for remote sessions is bidirectional bit. Preventing Eavesdropping For security purposes, when you are using the console mode of remote administration, the physical console of the server is automatically locked to prevent eavesdropping.

Overview Pearson Education, Inc.