Archive for September, 2009

iis web farm deployment tool

September 30, 2009

I haven’t used this one yet but it looks pretty neat. It’s a real release of Microsoft’s IIS web farm deployment tool. Basically it replaces a lot of what I used to use MS application center for and what I do today with batch files and robocopy.

ssl diagnostics for iis7

September 30, 2009

I have spent the better part of the day trying to figure out why a client cert that’s send to our servers just plain out doesn’t work. We get a 403.17 when we shouldn’t. It’s maddening because all we can get out of IIS is the 403.17, and since we do not own the client cert, there’s no easy way for us to test. So we have to trust that our b2b partner has things set up right (we don’t think they do) and then wait 30-35 minutes in between requests for them to re-test. It’s maddening.

This post contains some good troubleshooting info and steps.

Here is a link to some info and a utility for mapping client certs, something that Microsoft inexplicably left out of IIS7. (Why?!)

Another tool I found during this whole process was the IIS7 ssl checker utility. It didn’t (hasn’t) helped our specific situation, but it is something that looks useful that I will save for future problems that will definitely come up.


dell download manager – fail

September 23, 2009

I went to download from Dell’s website yesterday for some drivers for a server, and was clicking the download link and getting them really fast I thought.. that was until I realized that it was downloading some stupid download manager application and not the actual downloads. Quickly, I could not find a way to not use them, so I went ahead and tried one and… it didn’t work. So I tried another, no dice. Then I couldn’t find a way to not use the stupid things. I was stuck.

I found this post that explains how you get it and how to NOT get it.

This is the dumbest thing I have seen out of Dell in a while. It’s absolutely retarded to 1: require a download manager, 2: use one that just doesn’t work, and 3: make it so hard to opt out of the stupid thing. Very poorly done, Dell.

Here’s a post from Dell on the subject.

another w7 UI annoyance: the library

September 22, 2009

I hate the”library” and never have used it in any MS app, the way windows7 promotes it annoys me greatly. Here is a link to instructions on how to remove it. Of course it is much harder than it should be.

windows 7, getting that app back on a monitor you actually have

September 22, 2009

windows does a horrible job of recognizing that a monitor is gone but sending your program’s window to it. (Example would be if you have a laptop in a dock with 2 monitors at work, but at home you just use the laptop display – not an unheard of pattern of use.) In the pre W7 days, you could right click on it in the taskbar, choose “move” and then arrow key the thing around, unfortunately in W7 they took that away. It took me a whole lot of searching to find a solution, and it was in the comments of a post about the old trick in Vista. So, the trick is:

If you hit the Windows Logo Key plus the left or right arrow keys it snaps the off-screen window to the left or right side of the desktop (of the “active” display).

script: creating an app pool, application and assigning the pool to the application

September 2, 2009

As usual, this one was harder than it should have been. Granted, this task is pretty easy through the UI, but I have a bunch of environments to manage that must be the same… except for minor exceptions like the names of the site. Of course you have to supply the name of the site in these scripts. So what I did was find a way to output the name of the site based off the url of http://localhost and then set that to en environment variable that we use for the rest of the script.

You call this script with: scriptname vdirname path


set vdir=%1
set path=%2

echo %vdir%
echo %path%

%windir%system32inetsrvappcmd add apppool /name:%vdir%

FOR /F "tokens=*" %%i in (‘%windir%system32inetsrvappcmd list site http://localhost /’) do SET IISSITENAME=%%i

%systemroot%system32inetsrvAPPCMD add app / /path:/%vdir% /physicalPath:%path%

%systemroot%system32inetsrvAPPCMD set app "%IISSITENAME%/%vdir%" /applicationPool:%vdir%


script: iis7 making compression work

September 2, 2009

This was harder than it should have been, the permissions were wrong on the inetpubtempIIS Temporary Compressed Files folder and it made things difficult to fix. Here’s the script that I wrote. Basically we are setting the directory (probably redundant but I would rather play it safe), making the directory, applying the permission, and then enabling the compression.

You will need to go to a working server and export the permissions and run this first (I could let you have my file, but what admin would download a random file from some dude on the internet and run it? Not me!) Here’s the command that does that:

icacls "c:inetpubtempIIS Temporary Compressed Files" /save cinetpubtempiiscompressedfiles.acl


Then place that file with your script and run it on the offending server.


mkdir "C:inetpubtempIIS Temporary Compressed Files"

icacls c:inetpubtemp /restore cinetpubtempiiscompressedfiles.acl

%windir%system32inetsrvappcmd set config -section:system.webServer/httpCompression -directory:"C:inetpubtempIIS Temporary Compressed Files"

%windir%system32inetsrvappcmd set config -section:urlCompression /doDynamicCompression:true