CHAPTER 1: Installing Internet Information Server

### CHAPTER 1:

# Installing Internet Information Server

Installation Overview
Installation Notes
Installing Internet Information Server
How to Publish Information

This chapter is designed to help you install Microsoft Internet Information Server for Windows NT quickly and easily.

All you need to do is connect your Windows NT Server–based computer to the Internet or your intranet (your local or wide area network), install Microsoft Internet Information Server software, and point the information server to your home directory. This chapter tells you how.

Important To publish on the World Wide Web (WWW) and the Internet, you must contact an Internet Service Provider (ISP) to obtain an Internet connection. Your ISP will provide your server’s Internet Protocol (IP) address, subnet mask, and the default gateway’s IP address. (The default gateway is the computer through which your computer will route all Internet traffic.)

# Installation Overview

Installing Microsoft Internet Information Server is as simple as starting the Setup program on the compact disc. If you already have the necessary Internet or intranet connection, you can accept all of the default settings during setup and then add your HyperText Markup Language (HTML) content files to the \Wwwroot directory. Your files will be immediately available to users. The default setup configurations are suitable for many publishing scenarios without any further modifications.

This section defines the installation requirements and explains how to:

- Configure Windows NT before installation.

- Run the Setup program.

- Set up files to publish.

- Test your installation.

## Installation Requirements

Microsoft Internet Information Server requires:

- A computer with at least the minimum configuration to support Windows NT Server; see the Windows NT Configuration and Security Checklist later in this chapter.

- Windows NT Server version 4.0.

Note Remote administration of Internet Information Server can be performed from a computer running Windows NT Workstation version 4.0

- Transmission Control Protocol/Internet Protocol (TCP/IP) (included with Windows NT). Use the Network applet in Control Panel to install and configure the TCP/IP protocol and related components.

- A CD-ROM drive for the installation compact disc.

- Adequate disk space for your information content. It is recommended that all drives used with Microsoft Internet Infomation Server be formatted with the Windows NT File System (NTFS).

###### »&#nbsp;&#nbsp; To publish on the Internet, you will need:

- An Internet connection and Internet Protocol (IP) address from your Internet Service Provider (ISP).

- Domain Name System (DNS) registration for that IP address. This step is optional, but it does allow users to use “friendly names” instead of IP addresses when connecting to your server. For example, microsoft.com is the domain name registered to Microsoft. Within the microsoft.com domain, Microsoft has named its World Wide Web (WWW) server www.microsoft.com. Most ISPs can register your domain names for you.

- A network adapter card suitable for your connection to the Internet.

###### »&#nbsp;&#nbsp; To publish on an intranet, you will need:

- A network adapter card and Local Area Network (LAN) connection.

- The Windows Internet Name Service (WINS) Server or the Domain Name System (DNS) service installed on a computer in your intranet. This step is optional, but it does allow users to use friendly names instead of IP addresses.

## Windows NT Configuration and Security Checklists

Before installing Microsoft Internet Information Server, you must configure the Windows NT Server networking component so that your server can operate on the Internet. You may want to also enhance the Windows NT Server default security settings and implement other Windows NT security measures to prevent Internet users from tampering with your computer or network. For more information about security, see Chapter 5, “Securing Your Site Against Intruders.”

### Windows NT Configuration Checklist

Use the Network applet in Control Panel for all configuration tasks mentioned in this section.

- Obtain an Internet Connection. To publish on the Internet, you must have a connection to the Internet from an Internet Service Provider (ISP). To find an ISP, look in the telephone book under Computers-Networking or in your local newspaper’s business or technology section.

- Install Windows NT Server. Install Windows NT Server version 4.0 and Microsoft Internet Information Server.

- Configure the TCP/IP Protocol. Install the Windows NT TCP/IP Protocol and Connectivity Utilities. If the FTP Service provided with Windows NT has been installed, remove it. Your ISP must provide your server’s IP address, subnet mask, and the default gateway’s IP address. (The default gateway is the ISP computer through which your computer will route all Internet traffic.)

- Configure the Server’s Domain Name (also called Host Name). Your IP address (for example, http://10.138.59.1/homepage.htm) can always be used to contact your Web server. However, if you register a domain name in the Domain Name System (DNS), your server can be contacted by using a “friendly” domain name (for example, http://www.company.com/homepage.htm). ISPs can usually register domain names for you.

- Configure Name Resolution. You must have a Domain Name System (DNS) server’s IP address in order to use its friendly name in Internet Explorer when browsing other servers (and your own server, if it is registered in DNS) on the Internet.

If your server will be on a TCP/IP LAN with WINS servers, obtain the name of the WINS server to use.

An alternative to DNS is to use a HOSTS file. On intranets an alternative to WINS Servers is to use an LMHOSTS file. Make the appropriate Advanced TCP/IP Configuration setting for this server’s name resolution.

- WWW Virtual Servers Optionally, if you have registered multiple domain names (such as www.company1.com and www.company2.com), you can host multiple domain names on the same computer running Microsoft Internet Information Server. You use Advanced TCP/IP Configuration settings to assign multiple IP addresses to the network adapter card connected to the Internet. You should register a domain name for each IP address on your adapter.

If you need to add more than five virtual servers, see Help for more information.

### Windows NT Security Checklist

Several steps can be taken to enhance the security of a computer connected to the Internet. For further information on these checklist topics, see Chapter 5, “Securing Your Site Against Intruders.”

#### User Accounts

- Review the IUSR_computername account’s rights.

- Choose difficult passwords.

- Manage strict account policies.

- Limit the membership of the Administrators group.

#### NTFS File Security

- Use NTFS.

- Enable Auditing.

#### Running Other Network Services

- Run only the services that you need.

- Unbind unnecessary services from your Internet adapter cards.

- Check permissions on network shares.

## Contents of the Compact Disc

The Windows NT Server compact disc contains the \Inetsrv directory. From that directory use Inetstp.exe to install Microsoft Internet Information Server and all components, if you did not install Microsoft Internet Information Server while setting up Windows NT.

# Installation Notes

## Before Installing the Internet Information Server Services

Before installing the Internet Information Server services, disable any other Internet services.

If your server has another version of File Transfer Protocol (FTP), gopher, or WorldWide Web (WWW) services installed (such as the FTP service included with Windows NT Server or the European Microsoft Windows Academic Centre [EMWAC] services included in the Windows NT Resource Kit), such services must be disabled before you install the Microsoft Internet Information Server services. See the documentation for each service to see how to disable it.

## FTP Guest Account Access

During the Setup process, a screen will appear, asking you whether you want to disable access by the Guest account to your FTP server.

It is recommend that you select Yes to protect the contents of your system. If you choose the No option and enable guest access to your server, all existing files and any new files will be available to the Guest account through FTP. You will need to disable access to each file or directory individually to prevent unauthorized access. Disabling FTP access for the Guest account will not affect the IUSR_computername account that is created during Setup.

## Administrator Privileges Required

To install the Internet Information Server services, you must be logged on to the server with administrator privileges. Administrator privileges on the server are also required to configure the services remotely by using Internet Service Manager or HTML Administrator.

## Installation Directory

By default, Internet Information Server is installed from the compact disc to C:\winnt\system32\Inetsrv. If you change the default, be sure to enter a fully qualified path name, including a drive letter. Relative paths and paths without drive letters can be misinterpreted by Setup.

## Installing Internet Service Manager Only

To provide for separate installation of the administration tools, Microsoft Internet Information Server includes the Internet Service Manager installation directory, \Admin. To install this component, run Setup.exe from the appropriate directory.

## Remove All Button Affects Event Log Availability

If you remove Internet Information Server, you will be unable to review Internet Information Server events in the Event Log.

## Remove All Button Leaves Content Directories and Files

The Remove All button in Setup removes all Internet Information Server program files but does not remove the directory structure or any content or sample files. This setting protects your content files from unintentional deletion. If you want to remove these directories and files after completing the Remove All process, use the Windows NT Explorer.

## Converting 16-Bit ODBC Drivers to 32-Bit during Setup

If there are data sources referring to 16-bit Open Data Base Connectivity (ODBC) drivers on the system, Setup will detect them and ask you if you want to convert them to 32-bit. If you choose Yes, these data sources will be converted to refer to the 32-bit ODBC drivers.

# Installing Internet Information Server

Once you have your Internet connection and have configured Windows NT Server, you can install Microsoft Internet Information Server.

While setting up Windows NT Server, you will be asked if the computer is to be used as a server on the Internet.

###### »&#nbsp;&#nbsp; To install Internet Information Server during Windows NT Server Setup

1. Select the Install Microsoft Internet Information Server box.

The Internet Information Server Setup program begins.

2. Follow the instructions on the screen. If you have questions, click the Help button in any dialog box.

Note If you have already installed Windows NT Server version 4.0, you can install Internet Information Server separately by running Inetstp.exe directly from the \Inetsrv directory on the Windows NT Server compact disc.

To install the Internet Information Server services, you must be logged on with administrator privileges. In addition, to configure the Internet Information Server services by using the Internet Service Manager, your user account must be a member of the Administrators group on the target computer.

###### »&#nbsp;&#nbsp; To install separately after installing Windows NT Server

1. Insert the Windows NT Server compact disc into an appropriate drive.

2. In Windows NT Explorer or at the command prompt, change to the drive containing the compact disc.

3. Start Setup:

- To start Setup from Windows NT Explorer, double-click the file named Inetstp.exe in the Inetsrv directory of the compact disc.

- To start Setup from the command prompt, change to the Inetsrv directory of the compact disc and then type inetstp.

Note During setup, you can choose the Help button in any dialog box to get assistance. When you do, a Help topic is displayed that explains the choices you have at that point and the procedure to complete the dialog box.

4. The Microsoft Internet Information Server Welcome dialog box appears. Choose the OK button. The second dialog box appears.

5. All of the following items are selected for installation by default. If you do not want to install a particular item, click the box next to it to clear it.

Internet Service Manager installs the administration program for managing the services.

World Wide Web Service creates a WWW publishing server.

Gopher Service creates a gopher publishing server.

FTP Service creates an FTP publishing server.

ODBC Drivers and Administration installs Open Data Base Connectivity (ODBC) drivers. These are required for logging to ODBC files and for enabling ODBC access from the WWW service.

Important If you want to provide access to databases though the Microsoft Internet Information Server, you will need to set up the ODBC drivers and data sources by using the ODBC applet in Control Panel. Please see Chapter 8, “Publishing Information and Applications” for specific instructions.

If you have an application running that uses ODBC, you may see an error message telling you that one or more components are in use. Before continuing, close all applications and services that use ODBC.

Help and Sample files installs online Help and sample HyperText Markup Language (HTML) files.

Microsoft Internet Explorer installs the Web browser, Microsoft Internet Explorer.

You can use the Setup program later to add or remove components. Setup can also be used to remove all Internet Information Server components.

6. Accept the default installation directory (C:\winnt\system32\Inetsrv) or click the Change Directory button and enter a new directory.

Note If you have installed Internet Information Server, but want to reinstall it into another directory, you must remove the following key from the Registry: \HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\INetStp. If you do not delete this key, the Change Directory button will be dimmed and you will be unable to change the default directory.

7. Choose the OK button.

The Publishing Directories dialog box appears.

Accept the default directories for the publishing services you have installed, or change the directories.

Note If you already have files ready to publish, you can enter the full path to their current location, or move them into the default directories later. If your files are on a network drive, you should accept the default directory. After setup is completed, use Internet Service Manager to change your default home directory to the path for the network directory containing your files; for example, \\Servername\Sharename\WWWfiles. Be sure to carefully check the permissions on the network drive; there may be security implications. See Chapter 5, “Securing Your Site Against Intruders.”

8. Choose the OK button.

9. When prompted to create the service directories (Wwwroot, Gophroot, and Ftproot by default), click Yes.

10. The Create Internet Account dialog box appears. This is the account used for all anonymous access to the Internet Information Server. You should enter a password and confirm the password for this account. Choose OK.

11. Setup copies all remaining Internet Information Server files.

12. If the ODBC Drivers and Administration option box was selected, the Install Drivers dialog box appears.

To install a driver, select it from the Available ODBC Drivers list box, and choose the OK button.

Setup completes copying files.

13. The Setup completion dialog box appears. Click the OK button to complete Setup.

The preceding steps are all that is required for a simple installation. You are now ready to publish on the Internet or your intranet. There is no need to start Internet Service Manager unless you want to make advanced configuration changes. (If so, refer to Chapter 3, “Configuring and Managing Your Internet Information Server.”) Use the Services applet in Control Panel to confirm successful installation of the World Wide Web publishing service.

## Unattended Setup When Installing from a Network Directory

If you are using Microsoft Internet Information Server on a network you can copy the contents of the \Inetsrv directory on the Windows NT Server compact disc to a directory on your network and perform unattended installations over the network from that directory. (You can start an unattended setup from the compact disc itself; however, only the default configuration can be installed in this case.) This is useful for installing several servers at your site or to provide a simple over-the-network installation process for Internet Explorer users.

In the \Inetsrv directory, there is an Unattend.txt file. Unattend.txt is a sample configuration file used by the program for unattended installation. You modify the values in the file to configure setup. In general, the value 1 represents TRUE and the value 0 represents FALSE. It is suggested that you copy Unattend.txt to the directory containing the Setup.exe you will use, then modify it to meet your installation requirements.

To start unattended mode setup you must use the command prompt. Change to the directory containing both Setup.exe and Unattend.txt and type

setup -b unattend.txt

where Unattend.txt is the file you have modified. See Unattend.txt on the compact disc for more information about unattended setup.

## The IUSR_computername Account

Setup automatically creates an anonymous account called IUSR_computername. This account has a randomly generated password and privilege to log on locally. On domain controllers, this account is added to the domain database. This process is fully automatic. After installation is complete, you can change the user name and password for this account from the Service property sheet in Internet Service Manager, as long as the new user name and password matches the same user name and password in the Windows NT User Manager.

The WWW, FTP, and gopher services use the IUSR_computername user account by default when anonymous access is allowed. To set the rights for ISUR_computername, use User Manager. To set file permissions on NTFS drives for ISUR_computername, use the Windows NT Explorer. To change the account used for anonymous logons for any of the Internet Services, select the Service Properties option from the Properties menu in Internet Service Manager.

# How to Publish Information

Now that Microsoft Internet Information Server is installed and running, you are ready to publish on the Internet or your intranet. Providing information with Internet Information Server is easy. If your files are in HTML format, just add them to the appropriate home directory. For example, if you are using the WWW service, place the files in the \Wwwroot directory.

For more extensive information on creating and publishing content files, see Chapter 8, “Publishing Information and Applications.” Note that you can also create and publish highly interactive systems by writing programs using ISAPI.

Note If you provide files with the gopher or File Transfer Protocol (FTP) services, you can share those files instantly. Users can navigate through the files much as they do in Windows NT Explorer or at the command prompt. With gopher, you can customize how your directories and files appear to browsers; you can also include links to other servers in your files. FTP can be used to accept files from or send files to Internet users.

## Attempting to Publish from Redirected Network Drives

The FTP, gopher, and WWW services cannot publish from redirected network drives (that is, from drive letters assigned to network shared directories). To use network drives, you must use the server and share UNC name (for example, \\Computername\Sharename\Wwwfiles). If you specify a user name and password to connect to a network drive, all requests from remote users to access that drive must use the user name and password specified, not the anonymous ISUR_computername account or another account you may have specified.

Consider security issues carefully when using this feature. Remote users could possibly make changes to a network drive by using the permissions of the user name specified to connect to the network drive.

### Default.htm and the Internet Information Server
Home Page

By default, Internet Information Server uses a file named Default.htm as the home page for the various samples, tools, and demonstrations that come with the product. If the <wwwroot> directory of your WWW server already contains a file named Default.htm when you install Internet Information Server, your file will not be overwritten with our file. As a result, you will not have immediate access to our sample home page and the links it provides when you run Internet Information Server.

In this case, to view our version of Default.htm and the links it provides.type the following URL in the Internet Explorer Address box.

http://computername/samples/default.htm

This command loads the file Default.htm from the \Wwwroot\Samples directory on your Internet Information Server.

You can also rename or move your version of Default.htm to a different directory and then copy the file Default.htm from \Samples. This approach will make our version of Default.htm your server’s home page.

## How to Test Your Internet Information Server Installation

You can test your installation by using Internet Explorer to view the files in your home directory.

###### »&#nbsp;&#nbsp; To test a server connected to the Internet

1. Ensure that your server has HTML files in the \Wwwroot directory.

2. Start Internet Explorer on a computer that has an active connection to the Internet. This computer can be the server you are testing, although using a different computer is recommended.

3. Type in the Uniform Resource Locator (URL) for the home directory of your new server.

The URL will be “http://” followed by the name of your server, followed by the path of the file you want to view. (Note the forward slash marks.) For example, if your server is registered in DNS as “www.company.com” and you want to view the file “homepage.htm” in the root of the home directory, in the Location box you would type:

http://www.company.com/homepage.htm

then press the ENTER key. The home page should appear on the screen.

###### »&#nbsp;&#nbsp; To test a server on your intranet

1. Ensure that your computer has an active network connection and that the WINS server service (or other name resolution method) is functioning.

2. Start Internet Explorer.

3. Type in the Uniform Resource Location (URL) for the home directory of your new server.

The URL will be “http://” followed by the Windows Networking name of your server, followed by the path of the file you want to view. (Note the forward slash marks.) For example, if your server is registered with the WINS server as “Admin1” and you want to view the file “homepage.htm” in the root of the home directory, in the Location box you would type:

http://admin1/homepage.htm

then press the ENTER key. The home page should appear on the screen.

© 1996 by Microsoft Corporation. All rights reserved.