What is the file location of applicationhost.config in the different versions of IIS?

For the “big” IIS versions since IIS 7, the location is always the same: %windir%\System32\inetsrv\config\applicationHost.config For IIS Express there is one per user, the default location is: %USERPROFILE%\Documents\IISExpress\config\applicationhost.config again it’s the same for all versions. You can run multiple instances of IIS Express per user, you would need to specify the location of the applicationhost.config … Read more

Accessing a local website from another computer inside the local network in IIS 7 [closed]

Add two bindings to your website, one for local access and another for LAN access like so: Open IIS and select your local website (that you want to access from your local network) from the left panel: Connections > server (user-pc) > sites > local site Open Bindings on the right panel under Actions tab … Read more

Missing “Import Web Application” option in Web Deploy 3.6

WebDeploy 3.6 prerequisites for Import / Export Web Application slightly changed and more rights need to be given for web management to enable these options again. Here are the steps to allow it again in Windows Server 2012 R2 (and Windows Server 2016): Using Server Manager get to Add Roles and Features. Pick ‘Management Service’ … Read more

Windows Server 2012 R2 and IIS affected by Heartbleed exploit? [closed]

IIS is not vulnerable as it does not use the OpenSSL library Update, quote Troy Hunt: Not all web servers are dependent on OpenSSL. IIS, for example, uses Microsoft’s SChannel implementation which is not at risk of this bug. Does that mean that sites on IIS are not vulnerable to Heartbleed? For the most part, … Read more

HTTP error 403.16 – client certificate trust issue

Windows 2012 introduced stricter certificate store validations. According to KB 2795828: Lync Server 2013 Front-End service cannot start in Windows Server 2012, the Trusted Root Certification Authorities (i.e. Root) store can only have certificates that are self-signed. If that store contains non-self-signed certificates, client certificate authentication under IIS returns with a 403.16 error code. To … Read more