Iisext.vbs: IIS Web service extension script
Updated: January 21, 2005
Configures and manages Web service extensions, applications, and
individual files on servers running Windows Server 2003 with
Internet Information Services (IIS) 6.0. Administrators can use
this script to enable and list applications; add and remove
application dependencies; enable, disable, and list Web service
extensions; and add, remove, enable, disable, and list
individual files.
To view the command syntax, click a command:
iisext /enapp
Enables a specific application in the ApplicationDependencies
metabase property.
Syntax
iisext[.vbs] /enapp Application [/s
Computer [/u [Domain\]User
[/p Password]]]
Parameters
Application
Required. Specifies the name of the application to
be enabled.
/sComputer
Runs the script on the specified remote computer.
Type the computer name or IP address without
backslashes. By default, the script runs on the
local computer.
/u [Domain\]User
Runs the script with the permissions of the
specified user account. This account must be a
member of the Administrators group on the remote
computer. By default, the script runs with the
permissions of the current user of the local
computer.
/pPassword
Specifies the password of the user account specified
in the /u parameter. If you omit this
parameter, the script prompts you for the password
and obscures the text you type.
Remarks
- To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.
- This operation applies to entries in the ApplicationDependencies metabase property and is used to manage the Web service extensions an application depends upon. A Web service extension is any combination of CGI or ISAPI files that extend IIS functionality.
- An application must have at least one preexisting dependency in the ApplicationDependencies metabase property in order to be enabled.
Examples
The following examples show how to use iisext /enapp in
specific situations.
To enable an application on a local computer
The following command enables the application "Payroll" on the
local computer:
iisext /enapp Payroll
In response, iisext displays the following:
Connecting to server ...Done. Enabling application complete.
To enable an application on a remote computer
The following command enables the application "TravelPlans" on a
remote computer:
iisext /enapp TravelPlans /s RemoteComputer /u Manager /p Pa$$Werd
In response, iisext displays the following:
Connecting to server ...Done. Enabling application complete.
iisext /listapp
Lists applications in the ApplicationDependencies
metabase property.
Syntax
iisext[.vbs] /listapp [/s
Computer [/u [Domain\]User [/p
Password]]]
Parameters
/sComputer
Runs the script on the specified remote computer.
Type the computer name or IP address without
backslashes. By default, the script runs on the
local computer.
/u [Domain\]User
Runs the script with the permissions of the
specified user account. This account must be a
member of the Administrators group on the remote
computer. By default, the script runs with the
permissions of the current user of the local
computer.
/pPassword
Specifies the password of the user account specified
in the /u parameter. If you omit this
parameter, the script prompts you for the password
and obscures the text you type.
Remarks
- To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.
- This operation applies to entries in the ApplicationDependencies metabase property and is used to manage the Web service extensions an application depends upon. A Web service extension is any combination of CGI or ISAPI files that extend IIS functionality.
- An application must have at least one preexisting dependency in the ApplicationDependencies metabase property in order to be listed.
Examples
The following examples show how to use iisext /listapp in
specific situations.
To list applications in the ApplicationDependencies property on a local computer
The following command lists all of the applications that are in
the ApplicationDependencies list of the metabase on the
local computer:
iisext /listapp
In response, iisext displays all of the applications accessible from ApplicationDependencies on the local computer.
Connecting to server ...Done Active Server Pages Internet Data Connector Server Side Includes WebDAV Payroll TravelPlans
To list applications in the ApplicationDependencies property on a remote computer
The following command displays all of the applications
accessible from ApplicationDependencies on a remote
computer.
iisext /listapp /s RemoteComputer /u Manager /p Pa$$Werd
In response, iisext displays all of the applications available on the remote computer.
Connecting to server ...Done Active Server Pages Internet Data Connector Server Side Includes WebDAV Payroll TravelPlans
iisext /adddep, /remdep
Adds or removes a dependency between an application and one or
more Web service extensions.
Syntax
iisext[.vbs] {/addep | /rmdep}
ApplicationID [ID...] [/s Computer [/u
[Domain\]User [/p Password]]]
Parameters
Application
Required. Specifies the name of the application that
is dependent on one or more Web service extensions.
ID
Required. Specifies the ID of the Web service
extension upon which the application is dependent.
Additional dependencies are optional.
/sComputer
Runs the script on the specified remote computer.
Type the computer name or IP address without
backslashes. By default, the script runs on the
local computer.
/u [Domain\]User
Runs the script with the permissions of the
specified user account. This account must be a
member of the Administrators group on the remote
computer. By default, the script runs with the
permissions of the current user of the local
computer.
/pPassword
Specifies the password of the user account specified
in the /u parameter. If you omit this
parameter, the script prompts you for the password
and obscures the text you type.
Remarks
- To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.
- This operation applies to entries in the ApplicationDependencies metabase property and is used to manage the Web service extensions an application depends upon. A Web service extension is any combination of CGI or ISAPI files that extend IIS functionality.
- If the application does not exist in the ApplicationDependencies property, iisext will create it.
Examples
The following examples show how to use iisext /adddep,
/rmdep in specific situations.
To add application dependencies on a local computer
The following command makes the application "Payroll" dependent
on the Web service extension "timesheet" on the local computer.
In this example, the files that are required for the Web service
extension "timesheet" were previously added to and enabled on
the local computer.
iisext /adddep Payroll timesheet
In response, iisext displays the following:
Connecting to server ...Done. Adding dependency complete.
To remove multiple application dependencies from an application on a remote computer
The following command removes the dependency of the application
"TravelPlans" on the Web service extensions "FlightSchedules"
and "HotelRooms" on a remote computer:
iisext /rmdep TravelPlans FlightSchedules HotelRooms /s RemoteComputer /u Manager /p Pa$$Werd
In response, iisext displays the following:
Connecting to server ...Done. Removing dependency complete.
iisext /enext, /disext
Enables or disables a Web service extension with a specific Web
service extension ID.
Syntax
iisext[.vbs] {/enext | /disext}
ID [/s Computer [/u [Domain\]User
[/p Password]]]
Parameters
ID
Required. Specifies the ID of the Web service
extension to be enabled or disabled.
/sComputer
Runs the script on the specified remote computer.
Type the computer name or IP address without
backslashes. By default, the script runs on the
local computer.
/u [Domain\]User
Runs the script with the permissions of the
specified user account. This account must be a
member of the Administrators group on the remote
computer. By default, the script runs with the
permissions of the current user of the local
computer.
/pPassword
Specifies the password of the user account specified
in the /u parameter. If you omit this
parameter, the script prompts you for the password
and obscures the text you type.
Remarks
- To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.
- This operation applies to groups of entries that have the same Web service ID in WebSvcExtRestrictionList property of the metabase. The operation sets the Access flag to 1 (Allow) or 0 (Deny) on each of the ISAPIRestrictions or CGIRestrictions properties for that ID.
- A Web service extension is any combination of CGI or ISAPI files that extend IIS functionality.
- This operation can only be performed on one Web service extension at a time.
Examples
The following examples show how to use iisext /enext,
/disext in specific situations.
To enable a Web service extension on a local computer
The following command enables the Web service extension
"Payroll" on the local computer:
iisext /enext Payroll
In response, iisext displays the following:
Connecting to server ...Done. Enabling extension complete.
To disable a Web service extension on a remote computer
The following command disables the Web service extension "PassengerList"
on a remote computer:
iisext /disext PassengerList /s RemoteComputer /u Manager /p Pa$$Werd
In response, iisext displays the following:
Connecting to server ...Done. Disabling extension complete.
iisext /listext
Lists Web service extension IDs for all defined Web service
extensions. If there are multiple entries with the same ID, the
Web service extension is only listed once.
Syntax
iisext[.vbs] /listext [/s
Computer [/u [Domain\]User [/p
Password]]]
Parameters
/sComputer
Runs the script on the specified remote computer.
Type the computer name or IP address without
backslashes. By default, the script runs on the
local computer.
/u [Domain\]User
Runs the script with the permissions of the
specified user account. This account must be a
member of the Administrators group on the remote
computer. By default, the script runs with the
permissions of the current user of the local
computer.
/pPassword
Specifies the password of the user account specified
in the /u parameter. If you omit this
parameter, the script prompts you for the password
and obscures the text you type.
Remarks
- To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.
- This operation applies to entries in the WebSvcExtRestrictionList metabase property and is used to manage the Web service extensions an application depends upon. A Web service extension is any combination of CGI or ISAPI files that extend IIS functionality.
Examples
The following examples show how to use iisext /listext in
specific situations.
To list Web service extension IDs in the WebSvcExtRestrictionList property on a local computer
The following command lists all of the Web service extension IDs
that are in the WebSvcExtRestrictionList property of the
metabase on the local computer:
iisext /listext
In response, iisext displays all of the Web service extension IDs that are on the local computer.
Connecting to server ...Done SSINC Payroll ASP Inventory ASP.NET WEBDAV HTTPODBC
To list Web service extension IDs in the WebSvcExtRestrictionList property on a remote computer
The following command lists all of the Web service extension IDs
that are in the WebSvcExtRestrictionList property of the
metabase on a remote computer:
iisext /listext /s RemoteComputer /u Manager /p Pa$$Werd
In response, iisext displays all of the Web service extension IDs that are on the remote computer.
Connecting to server ...Done Payroll Inventory ASP.NET WEBDAV
iisext /addfile
Adds a single file to the Web service extension restriction list
(WebSvcExtRestrictionList) property in the metabase.
Syntax
iisext[.vbs] /addfile Path\FileName
Access {0 | 1} ID Deletable {0 |
1} ShortDesc [/s Computer [/u
[Domain\]User [/p Password]]]
Parameters
Path\FileName
Required. Specifies the file name and path of the
Web service extension entry to be added.
Access {0 | 1}
Required. Numeric designation of whether the file is
disabled (0) or enabled(1) after it is added.
ID
Required. Specifies the ID of the Web service
extension associated with the file. If the ID does
not exist, iisext will create it.
Deletable {0 | 1}
Required. Numeric designation of whether the entry
can be deleted from the Web service extension
restriction list using iisext or IIS Manager. Set to
0 to prevent the entry from being deleted or 1 to
allow it to be deleted.
ShortDesc
Required. A short description of the Web service
extension associated with the entry. This text can
be localized and should be the same for all entries
associated with the same Web service extension.
/sComputer
Runs the script on the specified remote computer.
Type the computer name or IP address without
backslashes. By default, the script runs on the
local computer.
/u [Domain\]User
Runs the script with the permissions of the
specified user account. This account must be a
member of the Administrators group on the remote
computer. By default, the script runs with the
permissions of the current user of the local
computer.
/pPassword
Specifies the password of the user account specified
in the /u parameter. If you omit this
parameter, the script prompts you for the password
and obscures the text you type.
/addfile /?
Displays help at the command prompt.
Remarks
- To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.
- This operation applies to entries in the WebSvcExtRestrictionList metabase property and is used to manage the Web service extensions an application depends upon. A Web service extension is any combination of CGI or ISAPI files that extend IIS functionality.
- Path\FileName can include special cases such as *.dll to enable/didisablenlisted ISAPI files and *.exe to enable/disable unlisted CGI files.
Examples
The following examples show how to use iisext /addfile in
specific situations.
To add a Web service extension file as an entry in the WebSvcExtRestrictionList on the local computer
The following command adds the file Timesheet.exe as an entry in
the Web service extension restriction list (WebSvcExtRestrictionList)
on the local computer. The Access flag is set to 0 to
disable the entry on startup, The ID identifies the
associated Web service extension as Payroll, and the
Deletable flag is set to 1 to allow the entry to be deleted
from the Web service extension restriction list if necessary.
iisext /AddFile c:\Source\Timesheet.exe 0 Payroll 1 Payroll
In response, iisext displays the following.
Connecting to server ...Done. Adding extension file complete.
To add a Web service extension file as an entry in the WebSvcExtRestrictionList on a remote computer
The following command adds the file Payscale.dll as an entry in
the Web service extension restriction list (WebSvcExtRestrictionList)
on a remote computer. The Access flag is set to 1 to
enable the entry on startup, The ID identifies the
associated Web service extension as Payroll, and the
Deletable flag is set to 0 to prevent the entry from being
deleted from the Web service extension restriction list.
iisext /AddFile c:\Source\Payscale.dll 1 Payroll 0 Payroll /s RemoteComputer /u Manager /p Pa$$Werd
In response, iisext displays the following.
Connecting to server ...Done. Adding extension file complete.
iisext /enfile, /disfile, /rmfile
Enables, disables, or removes a specific Web service extension
file in the Web service extension restriction list (WebSvcExtRestrictionList)
property.
Syntax
iisext[.vbs] {/enfile | /disfile |
/rmfile} [Path\]FileName [/s
Computer [/u [Domain\]User [/p
Password]]]
Parameters
[ Path\]FileName
Required. Specifies the file to be enabled,
disabled, or removed.
/sComputer
Runs the script on the specified remote computer.
Type the computer name or IP address without
backslashes. By default, the script runs on the
local computer.
/u [Domain\]User
Runs the script with the permissions of the
specified user account. This account must be a
member of the Administrators group on the remote
computer. By default, the script runs with the
permissions of the current user of the local
computer.
/pPassword
Specifies the password of the user account specified
in the /u parameter. If you omit this
parameter, the script prompts you for the password
and obscures the text you type.
Remarks
- To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.
- This operation applies to entries in WebSvcExtRestrictionList property of the metabase. The operation sets the Access flag to 1 (Allow) or 0 (Deny) on each of the ISAPIRestrictions or CGIRestrictions properties for that file entry.
- If a \rmfile operation is performed on a file flagged as not deletable, iisext returns an error.
- A Web service extension is any combination of CGI or ISAPI files that extend IIS functionality.
- This operation can only be performed on one Web service extension file at a time.
Examples
The following examples show how to use iisext /enfile,
/disfile, or /rmfile in specific situations.
To enable a Web service extension file on a local computer
The following command enables the file "Timesheet.exe" in the
WebSvcExtRestrictionList property of the metabase on the
local computer:
iisext /enfile c:\Source\Timesheet.exe
In response, iisext displays the following:
Connecting to server ...Done. Enabling extension file complete.
To disable a Web service extension file on a remote computer
The following command disables the file "Taxes.dll" in the
WebSvcExtRestrictionList property of the metabase on a
remote computer:
iisext /disfile c:\Source\Taxes.dll /s RemoteComputer /u Manager /p Pa$$Werd
In response, iisext displays the following:
Connecting to server ...Done. Disabling extension file complete.
To remove a Web service extension file on a remote computer
The following command removes the file "HourlyRate.dll" in the
WebSvcExtRestrictionList property of the metabase on a
remote computer:
iisext /rmfile c:\Source\HourlyRate.dll /s RemoteComputer /u Manager /p Pa$$Werd
In response, iisext displays the following:
Connecting to server ...Done. Removing extension file complete.
iisext /listfile
Lists Web service extension files for all defined Web service
extensions.
Syntax
iisext[.vbs] /listfile [/s
Computer [/u [Domain\]User [/p
Password]]]
Parameters
/sComputer
Runs the script on the specified remote computer.
Type the computer name or IP address without
backslashes. By default, the script runs on the
local computer.
/u [Domain\]User
Runs the script with the permissions of the
specified user account. This account must be a
member of the Administrators group on the remote
computer. By default, the script runs with the
permissions of the current user of the local
computer.
/pPassword
Specifies the password of the user account specified
in the /u parameter. If you omit this
parameter, the script prompts you for the password
and obscures the text you type.
Remarks
- To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.
- This operation applies to entries in the WebSvcExtRestrictionList metabase property and is used to manage the Web service extensions an application depends upon. A Web service extension is any combination of CGI or ISAPI files that extend IIS functionality.
Examples
The following examples show how to use iisext /listfile
in specific situations.
To list Web service extension files in the WebSvcExtRestrictionList property on a local computer
The following command lists all of the Web service extension
files that are in the WebSvcExtRestrictionList property
of the metabase on the local computer:
iisext /ListFile
In response, iisext displays all of the Web service extension files that are on the local computer.
Connecting to server ...Done E:\Windows\system32\inetsrv\asp.dll E:\Windows\system32\inetsrv\httpodbc.dll E:\Windows\system32\inetsrv\ssinc.dll E:\Windows\system32\inetsrv\httpext.dll E:\Windows\system32\Microsoft.NET\Framework\v1.0.3705 \aspnet_isapi.dll c:\Source\Taxes.dll c:\Source\Accounting.dll c:\Source\Taxes.exe c:\Source\Timesheet.exe c:\Source\Payscale.dll
Remarks
- The /u and /p command-line options are available only when you use /s. You must use /p with /u to provide the user's password.
- Iisext.vbs performs the same operations that are available from IIS Manager. You can use either tool to administer IIS Web sites.
- The computer issuing the command must be running Windows XP or a Windows Server 2003 operating system. The user must be a member of the Administrators group on any computer that the command affects.
- The computer that the command affects must be a server running Windows Server 2003 with Internet Information Services (IIS) 6.0.
Formatting legend
| Format | Meaning |
| Italic | Information that the user must supply |
| Bold | Elements that the user must type exactly as shown |
| Ellipsis (...) | Parameter that can be repeated several times in a command line |
| Between brackets ([]) | Optional items |
| Between braces ({}); choices separated by pipe (|). Example: {even|odd} | Set of choices from which the user must choose only one |
| Courier font | Code or program output |